NYC

nda-triage

Warn

Audited by Snyk on Feb 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill ingests and analyzes incoming NDAs submitted by sales/business development—that is, external counterparty documents (untrusted third-party content)—and the agent is expected to read and interpret those documents as part of its workflow, which could allow indirect prompt injection.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 15, 2026, 08:32 PM