aha-moments-builder
Warn
Audited by Snyk on Feb 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md "Research Support" section explicitly instructs the agent to "Use WebSearch to find how similar products describe their core value moment," meaning the agent will fetch and interpret open/public web content (potentially user-generated) which can influence its suggestions and next actions.
Audit Metadata