seo-optimization

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's workflow and input schema explicitly require auditing arbitrary public websites (e.g., Phase 1 diagnostics: "npx lighthouse https://example.com", "curl https://yourdomain.com/robots.txt", checking /sitemap.xml and the required "url" field in schemas/input.schema.json), so the agent will fetch and interpret untrusted third-party web content that can materially influence recommendations and actions.