local-seo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's SKILL.md and citation-management.md explicitly direct the agent to crawl and ingest public third-party sources (e.g., Yelp, Google Business Profile, BBB, data aggregators and manual Google searches, reviews and Q&A pages) and to use that untrusted, user-generated content to drive citation remediation, GBP edits, review responses, and other follow-up actions—meeting all criteria for indirect prompt injection risk.