troubleshoot

Warn

Audited by Snyk on Mar 2, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's required troubleshooting workflow instructs the agent to open and interact with target URLs using agent-browser (e.g., "agent-browser open https://example.com/target-page" and "対象URLで再現" in the "問題別対応" section), which clearly fetches and interprets arbitrary third-party web pages as part of its diagnostic actions, exposing it to untrusted user-provided content that could inject instructions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 2, 2026, 03:18 AM