seo-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow explicitly fetches and parses arbitrary public URLs (see SKILL.md steps 2–7) using scripts like fetch-page.py, check-page.py and check-schema.py and then instructs the agent/LLM to read H1/title/meta/JSON-LD (llm_review_required) and make semantic decisions that drive report generation, which exposes the agent to untrusted third‑party page content that could contain injected instructions.