business-analyst
Warn
Audited by Snyk on Feb 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's workflow and example subagent prompt in SKILL.md (see "Use WebSearch for current market data" and Notes for LLMs: "Use WebSearch/WebFetch for market research") explicitly instructs agents to fetch and interpret open web/public sources (competitor sites, market data) which can directly influence research outputs and subsequent actions.
Audit Metadata