seo-maker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflow explicitly instructs fetching and interpreting live web content and search results (e.g., "Collect evidence from local code, pages, browser checks, and web sources" in SKILL.md; rules/seo-workflow.md references using WebFetch for live URL analysis and "run web searches"; references/aeo-geo-guide.md describes running AI citation probes), so arbitrary public pages or SERP results would be ingested and can materially influence audit findings and optimization actions.