competitor-alternatives
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's Research Process (in SKILL.md) explicitly directs "Review mining: G2, Capterra, TrustRadius" and "Content research: their comparison pages, their changelog," which requires the agent to fetch and interpret public, user-generated third-party reviews and web pages that will directly influence competitor-data and page-generation decisions, creating a clear avenue for indirect prompt injection.
Audit Metadata