ftc-disclosure-spot-checker

Warn

Audited by Snyk on Feb 22, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The SKILL.md "Information Gathering" section requires the agent to ingest and analyze creator-submitted captions, scripts, or post text (user-generated/untrusted content pasted by the user), which the agent will read and act on to generate compliance decisions and edits, creating a clear avenue for indirect prompt injection.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 22, 2026, 05:56 PM