seo-machine

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). High likelihood: the required runtime workflow performs outsider web/SERP scraping and social/forum aggregation (e.g., Exa web search + Firecrawl SERP scrape + /last30days Reddit/X/HN mentions) and then feeds the resulting summaries/content into the agent to generate keyword research and page payloads.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly runs GitHub CLI/API commands at runtime (e.g., "gh api repos/<owner/repo>/contents/README.md --jq '.content' | base64 -d") to fetch repository contents which are injected into the research/agent context and therefore can directly influence the model's outputs.