content-refresh

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). Workflow 1 Step 3 explicitly instructs performing manual Google searches and analyzing the top 3–5 SERP results (and using Ahrefs/SEMrush to inspect competitor pages and URLs), so the agent is expected to read and act on untrusted public web content that could contain arbitrary/user-generated instructions.