query-cluster

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow calls seo_describe_report / seo_run_report to retrieve a “query-cluster” report (GSC-derived query/page rows) and then instructs the agent to read cluster member queries/pages and recommendations, which are outsider-authored free text from search results/content rather than user-authored input.