seo-dataforseo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to fetch and interpret live public/web and user-generated content (e.g., serp_organic_live_advanced for Google/Bing SERPs, serp_youtube_video_comments_live_advanced for YouTube comments, on_page_content_parsing for arbitrary URLs, and ai_optimization_chat_gpt_scraper), and that content is read and used to drive analysis and follow‑up actions, exposing the agent to untrusted third‑party input.