content-seo

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The "Companion check" instructs the agent to run shell commands (ls) and propose installing packages (npx) to inspect and modify the host environment — a system-level action unrelated to the content-SEO skill and effectively an extraneous instruction to access/alter local files, so it constitutes a prompt-injection risk outside the skill's stated purpose.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's instructions explicitly require exporting/crawling competitors' top pages and SERPs and mining public forums (see "Perform a content gap analysis vs competitors" in SKILL.md and references/content-gap-analysis.md which mention Ahrefs/Semrush, crawling competitor pages, Google SERPs, and "Reddit and Quora"), so the agent is expected to ingest untrusted, user-generated public content that can materially influence decisions.