moai-alfred-rules
Warn
Audited by Snyk on Mar 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill's required Phase 1: Analyze (in SKILL.md) explicitly mandates using WebSearch and WebFetch to retrieve public/official URLs and web research as input to design and decision steps, so the agent will ingest open third‑party content that can materially influence actions and enable indirect prompt injection.
Audit Metadata