cabinet-ai-knowledge-base
Warn
Audited by Snyk on Apr 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly describes agents with skills like "web-search" and "reddit-scout" and workflow patterns such as "Researcher agent scouts Reddit/HN every 6h" and a template that directs "Search for '[TOPIC] news' from the last 24 hours", which shows the daemon/agents will fetch and ingest public, user-generated web/social content (Reddit/HN) and use those findings to write files and drive downstream agent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata