content-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). This skill explicitly analyzes arbitrary webpages ("Audit the core on-page signals for any URL") using tools like seo_analyze_page and seo_schema_detection, so it fetches and interprets public third-party page content as part of its required workflow, which could allow indirect prompt injection from untrusted web content.