seo-meta-optimizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's URL crawling mode (Step 2: "From URL (Claude Code only)") instructs the agent to fetch sitemap.xml and scrape public page content (extracting and tags) from arbitrary websites, meaning untrusted third-party web content is ingested and directly used to drive optimization decisions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly calls get_marketing_reference(slug: "title-optimization-rules") (Tiger Den marketing references) at runtime to fetch the full grammar/shortening/validation rules that directly control the title-optimization instructions and is required (the pre-flight stops if Tiger Den is unavailable).