seo-all

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). SKILL.md Step 0 explicitly instructs dispatching agents that invoke /seo on four public websites (psquared.dev, inboxmate.psquared.dev, ki-linz.at, agenthub.psquared.dev), which requires fetching and interpreting live, untrusted site content (robots.txt, sitemap, pages, meta/structured data) and using those results to drive reports and fixes, so third‑party content can materially influence actions.