seo-drift

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). SKILL.md describes runtime fetching/parsing of the user-supplied <url> (scripts/fetch_page.py → scripts/parse_html.py) to extract HTML fields and compare them; those extracted values originate from arbitrary web page content authored by outsiders and can include free text from the page that may be passed into the agent/LLM context.