healthcare-monitor
Warn
Audited by Snyk on Mar 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and scrapes untrusted public third‑party sources (e.g., "天眼查/企查查" in SKILL.md and docs/FREE_SCRAPER_GUIDE.md, Firecrawl/36Kr/新浪 in PRD and SYSTEM_DESIGN, and planned Twitter/微博 crawling) and then reads/interprets that content to drive AI funding-detection logic and automated alerts, so third‑party content can materially influence agent actions.
Audit Metadata