algo-seo-backlink

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly requires ingesting backlink exports and fetching/reading live third-party sites (e.g., SKILL.md Phase 1: "Export backlink data from Ahrefs, Moz, or Search Console"; references/competitor-gap.md: "classify each gap domain by its primary topic using its homepage content"; references/toxicity-scoring.md: "open the linking page"), so the agent will read untrusted public webpages whose content can materially influence actions like disavow and outreach.