seo-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to fetch and analyze user-provided public websites (e.g., checking robots.txt, XML sitemaps, and page HTML via web_fetch/curl and browser tools as noted in the "Schema Markup Detection Limitation" and crawl/indexation checks), so it ingests and acts on untrusted third‑party web content that can influence subsequent audit actions.