research-ops
Warn
Audited by Snyk on Apr 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The SKILL explicitly instructs the agent to run web discovery and synthesis (e.g., "use
exa-searchfor fast current-web discovery" and "escalate todeep-research" in SKILL.md's Skill Stack and Workflow), which requires fetching and interpreting public, untrusted web content as part of its workflow.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata