rank-local

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly directs the agent to check public listings and reviews (e.g., "Search 'business name' + 'city' and review every listing that appears") and references pulling live Google Business Profile data and reviews via SEOJuice ("/seojuice:gbp-overview") so the agent would ingest untrusted, user-generated third-party content and act on it (audit findings and reply to reviews).