technical-seo
Warn
Audited by Snyk on Mar 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's Audit Workflow (SKILL.md — Step 1 "Technical Audit") explicitly instructs the agent to "Crawl the target URL" and the TECHNICAL-AUDIT.md contains multiple "Tell AI: Audit metadata for these pages: [list your important pages]" prompts, which require fetching and interpreting arbitrary public/site URLs (untrusted third-party content) as part of its runtime workflow.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata