keyword-research
Warn
Audited by Snyk on Mar 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill explicitly states in "Data Sources" and "Competitive Research" that it will automatically pull SERP analysis, competitor rankings, and related keyword suggestions from external SEO tools and public competitor URLs (e.g., "With ~~SEO tool + ~~search console connected: The skill will fetch..."; "What keywords is [competitor URL] ranking for"), so the agent ingests untrusted public third‑party content that can materially influence its recommendations.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata