surprise-me
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly allows the tools "web_search" and "wikipedia", so the agent will fetch and interpret content from public websites and user-edited Wikipedia pages as part of its workflow, exposing it to untrusted third-party content that could carry indirect prompt injections.
Audit Metadata