tech-info-gathering
Warn
Audited by Snyk on Mar 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's workflow (Phase 3: 情報収集実行 and references/research-methods.md) explicitly instructs the agent to fetch and read open web sources (GitHub issues/PRs, Stack Overflow, Reddit, official docs via WebFetch) which are untrusted/user-generated and are used to drive research decisions and next actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata