research-synthesis-workflow
Warn
Audited by Snyk on Mar 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's required workflow (SKILL.md Phase 2 "Source Gathering" and Phase 3 "Information Extraction") explicitly instructs finding, recording URLs/DOIs, and reading public sources including technical blogs, Wikipedia, and Stack Overflow—i.e., ingesting untrusted/user-generated third-party content that is then used to drive synthesis and recommendations.
Audit Metadata