last30days
Warn
Audited by Snyk on Mar 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly runs scripts/last30days.py and README/SKILL.md describe fetching and ingesting public, user-generated content from Reddit, X (Twitter), YouTube (yt-dlp transcripts) and web, and those research outputs are required to be read and directly drive synthesis and prompt/format decisions (e.g., "Read the ENTIRE output" and "If research says to use a specific prompt FORMAT, YOU MUST USE THAT FORMAT"), so untrusted third‑party content can materially influence agent behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata