generative-engine-optimization

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The GEO workflow instructs the agent to search and gather evidence from public community platforms (Reddit, Hacker News, GitHub issues) via web search to draft simulation prompts, exposing the agent to outsider-authored free text via active search and fetch.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill references an installation script on a remote domain (https://cli.promptingco.com/install.sh) which is fetched and executed via curl during setup/prerequisites instructions.