seo-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to fetch the homepage via scripts/fetch_page.py and to crawl up to 500 pages of the public site ("Crawl site — follow internal links up to 500 pages"), so it ingests untrusted third‑party web content that will be read and used to drive audit findings and recommendations.