seo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md’s required runtime workflow for commands like audit [url] includes fetching and crawling the user-supplied URL’s homepage/pages (outsider-authored web content) and passing that fetched HTML/text into sub-agents, which then feed into the LLM context (indirect prompt injection risk).