skills/browser-act/skills/google-news-api-skill/Snyk

google-news-api-skill

Warn

Audited by Snyk on Mar 28, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.80). This skill explicitly calls the BrowserAct Google News workflow to fetch and return Google News article content (see SKILL.md and scripts/google_news_api.py), so untrusted public web content is ingested and presented for the agent to process, which could materially influence its decisions and enable indirect prompt injection.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Mar 28, 2026, 03:43 PM

Issues

1