workflow-technical-watch

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow uses MCP calls (seo_list_reports → seo_describe_report → seo_run_report) and then instructs the agent to inspect the resulting crawl, index, and recovery outputs; those outputs are likely derived from crawling/sitemap/recovery of URLs (outsider-authored web content) and are fed back into the agent’s context as readable report text/structured content at runtime.