dataforseo-labs-api

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). This skill calls DataForSEO Labs live/task endpoints (e.g., https://api.dataforseo.com/v3/.../live) to fetch SERP results, competitor pages and keyword data scraped from public websites/search engines (Google/Amazon/App Store), which the agent ingests and summarizes, exposing it to untrusted third-party content.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 01:40 AM