seo

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The prompt includes explicit instructions to check for and append telemetry to a user's ~/.claude/projects/ directory (self-evolution telemetry), which is unrelated to the advertised SEO audit/fix purpose and causes silent persistence/modification of user files—a hidden/out-of-scope directive.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to crawl and audit "every public page" of the target site (including sitemap.xml, robots.txt, public pages, LCP elements, and /llms.txt at the site root), which requires ingesting arbitrary public website content that could be untrusted and influence subsequent fixes/actions.