seo-geo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is ingested via runtime web fetching of user-supplied arbitrary URLs and their cited sources in steps 5–6 (WebFetch pulls page HTML/markdown and extracts passages/snippets), which then gets embedded into the generated GEO.md/evidence files for the agent’s LLM context.