team-coordinate-v2

Warn

Audited by Snyk on Feb 28, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill can spawn a researcher/explore subagent that performs codebase exploration and explicitly lists "WebSearch" / external docs as a search tool (see subagents/explore-subagent.md Search Tool Priority), meaning the agent may fetch and interpret untrusted public web content which can influence role generation and task decisions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 28, 2026, 06:18 PM