keyword-research

Warn

Audited by Snyk on Mar 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The skill explicitly states in "Data Sources" and "Competitive Research" that it will automatically pull SERP analysis, competitor rankings, and related keyword suggestions from external SEO tools and public competitor URLs (e.g., "With ~~SEO tool + ~~search console connected: The skill will fetch..."; "What keywords is [competitor URL] ranking for"), so the agent ingests untrusted public third‑party content that can materially influence its recommendations.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 13, 2026, 12:29 PM
Issues
1