seo-optimizer
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill fetches and parses content from arbitrary WordPress REST API endpoints (see get_all_pages -> {base_url}/wp-json/wp/v2/pages and fetch_json using curl) and uses that untrusted page/post data — plus Unsplash searches for auto-fixes — to drive audits, recommendations and automated updates, so third‑party user content can materially influence agent actions.
Audit Metadata