technical-seo

Warn

Audited by Snyk on Feb 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The skill's required workflow explicitly instructs the agent to fetch and interpret external site data (e.g., "Pull current Core Web Vitals from CrUX or PageSpeed Insights" and "Review robots.txt / Validate XML sitemap / Test rendered HTML using Google's URL Inspection tool") for making audit decisions, which involves ingesting arbitrary, user-provided public website content and third‑party reports that can materially influence next actions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 27, 2026, 01:05 PM