token-efficiency
Warn
Audited by Snyk on Mar 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md explicitly instructs the agent to run WebSearch queries against the open web (see "12. Efficient Scientific Literature Searches" and WebSearch(...) examples), which requires fetching and interpreting untrusted public content that can influence subsequent decisions and tool use.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata