skill-researcher
Warn
Audited by Snyk on Feb 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to "Search the web for documentation/examples" using Tools:
WebSearch,WebFetch(under "Web Research") and even cites sources like Stack Overflow, so the agent will fetch and interpret untrusted public third-party content that can influence its recommendations.
Audit Metadata