seo-content

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required Step 1 "Content Brief" explicitly mandates SERP analysis—asking the agent to "describe the top 3-5 results" and to "find real PAA questions by searching your target keyword in Google"—which requires fetching and interpreting open/public web pages (potentially user-generated/untrusted content) that directly inform the agent's subsequent choices and outputs.