programmatic-seo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's playbooks and implementation guidance explicitly require ingesting public third‑party content (e.g., "Google Places API, or scrape from business directory" in references/playbooks.md Playbook 1 and "G2/Capterra/Trustpilot APIs" in Playbook 2) and instruct the agent to use that scraped/public data as part of the template/page generation and decision-making workflow, exposing it to untrusted user‑generated content that could carry indirect prompt injection.