seo-specialist

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to analyze public competing pages and search results (e.g., "The skyscraper approach: Find content that ranks," "Research process: ... People also ask, related searches, and competitor analysis," and "If the top 10 results are all blog posts..."), which requires fetching/reading untrusted third‑party web content that can influence decisions.