archon-dev
Warn
Audited by Snyk on Apr 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill explicitly launches a "web-researcher" to fetch external docs and links (cookbooks/investigate.md Phase 2 — "Agent 1: Web Researcher" is "Always launch") and also fetches public GitHub issues via
gh issue view(e.g., cookbooks/debug.md, issue.md), so untrusted, user-generated third‑party content is ingested and used to form recommendations and drive actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata