serp-tracker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow (Process step 2) explicitly retrieves and ingests live SERP content via Moz and Google Search Console and records feature contents (snippet text, PAA questions, AI Overview summaries and cited sources), meaning it reads untrusted public web content that can materially influence analysis and recommendations.