content-strategy
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md "Content Ideation Sources" and "Competitor Analysis" sections explicitly instruct using web search to fetch and extract content from public, user-generated sites (Reddit, Quora, Hacker News, Product Hunt, competitor blogs), which the agent must read and use to drive content decisions—exposing it to untrusted third-party content that could inject instructions.
Audit Metadata