anysite-vc-analyst

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and parses arbitrary public websites and user-provided pitch deck links via mcp__anysite__parse_webpage and WebFetch, reads LinkedIn profiles with mcp__anysite__get_linkedin_profile, and performs WebSearch for fund portfolios — all untrusted third-party content that the agent ingests and interprets as part of its workflow.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 10:54 AM