seo-local-seo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md and CITATION_SOURCES.md explicitly instruct auditing and updating public citation sites and reading/searching public content (e.g., Google autocomplete/People Also Ask, Google Business Profile, Yelp, Facebook, competitor landing pages) and calls out tools like analyze_page and research_keywords to inspect those pages, meaning the agent would fetch and interpret untrusted, user-generated third‑party content that could influence actions.