geo-optimizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md Step 3/Step 4 (audit/optimize), the workflow ingests user-supplied content (e.g., it says to “fetch URL via WebFetch” for a pasted URL and “read file path, or ask for paste”), and Step 5 performs LLM-readable checks and evidence handling on that content.