content-checklist

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's "Final check — run these tools before publishing" step requires the agent to run seo_analyze_page, seo_schema_detection, and pagespeed_insights against a staging or live URL, which causes it to fetch and interpret content from public/untrusted web pages and use those results to decide publish actions.