seo-a11y-analyzer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime path runs scripts/validate-with-axe.sh which accepts a <file-or-url> argument and, if it’s a URL, converts it to TARGET="https://..." and passes it to npx @axe-core/cli "$TARGET"—this causes the agent to fetch and ingest outsider-authored public web page content into the LLM context via the tool’s output/logs (indirect prompt injection risk).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The included runtime script scripts/validate-with-axe.sh invokes npx --yes @axe-core/cli (i.e., fetches and executes the remote npm package @axe-core/cli at runtime), which is a required external code dependency — see https://www.npmjs.com/package/@axe-core/cli.