doc-retriever
Warn
Audited by Snyk on Mar 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly lists "Web Search: Use google_web_search" as a core strategy, which directs the agent to fetch and interpret content from public web pages (untrusted third-party sources) that could contain user-generated instructions influencing its actions.
Audit Metadata