site-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow crawls and audits a user-specified website domain using Ubersuggest SEO tools, which involves reading web content and audit results from the target site. Since crawling arbitrary external websites can expose the agent to untrusted page text, this falls under the low-risk category for web crawling.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill configures an operational dependency on an external MCP server via HTTPS (https://ubersuggest-mcp.neilpatelapi.com/mcp), which is provided by a third-party vendor (Neil Patel / Ubersuggest) and constitutes a common unofficial or third-party operational dependency.