meta-tags-optimizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's instructions (SKILL.md) require or allow ingesting arbitrary page URLs and state that when connected to search console/SEO tools it will "automatically pull current meta tags, CTR data..., competitor title/description patterns, SERP preview data" — i.e., it fetches and interprets untrusted public web content (page URLs and competitor SERP data) as part of its workflow, which could carry indirect prompt-injection risks.