serp-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly states it can "automatically fetch SERP snapshots" and requires/analyzes arbitrary top-10 ranking page URLs and SERP content (see "Data Sources" and step 3 "Analyze Top Ranking Pages" in SKILL.md), meaning the agent will ingest and act on untrusted public web content which could carry indirect prompt-injection risks.