seo-roast

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly takes user-provided URLs and uses the Browser/Playwright MCP or the agent-browser CLI to open, snapshot, and scrape page text/HTML/screenshots from public websites (and optionally uses a SERP API), thereby ingesting untrusted third-party web content.