research-synthesis-workflow

Warn

Audited by Snyk on Mar 9, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's required workflow (SKILL.md Phase 2 "Source Gathering" and Phase 3 "Information Extraction") explicitly instructs finding, recording URLs/DOIs, and reading public sources including technical blogs, Wikipedia, and Stack Overflow—i.e., ingesting untrusted/user-generated third-party content that is then used to drive synthesis and recommendations.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 9, 2026, 10:11 PM