google-search-console

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's pagespeed command calls the public PageSpeed Insights API (https://pagespeedonline.googleapis.com/...) for arbitrary URLs (and the URL inspection/richResults outputs from the Search Console API are returned as JSON), and the SKILL.md and CLI code show the agent is expected to invoke these commands and read/interpret those API responses—so it clearly ingests external, potentially untrusted public web content that could contain instructional/structured data influencing subsequent actions.