seo-google
Warn
Audited by Snyk on Apr 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and ingests public third-party content—e.g., YouTube video details and "top 10 comments" via
/seo google youtube-video, arbitrary webpage data via PageSpeed Insights/CrUX (/seo google pagespeed,crux) and NLP on a provided<url-or-text>—and those inputs are read and used to generate reports and recommendations, so untrusted user-generated content could indirectly inject instructions that influence actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata