seo-regression-validator
Warn
Audited by Snyk on Jul 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In
scripts/audit_static_seo.py, the required workflow can ingest arbitrary outsider-authored free text by HTTP-fetching a user-specified target URL (read_target: URLs viaurllib.request.urlopen(...).read()), then regex/parses it (audit_html/extract_jsonld)—so an outsider can poison by publishing content at a URL the workflow is directed to audit.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata