NYC

medical-newsletter-writer

Warn

Audited by Snyk on Feb 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's trend-analysis workflow explicitly searches and ingests content from open/public third-party sources — e.g., "Google News", "web_search"/Google Trends, YouTube, X/Twitter, and LinkedIn as listed in Phase 2 / Step 1.2 — and the agent is expected to read and interpret those public/social media results as part of its workflow, exposing it to untrusted user-generated content.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 15, 2026, 09:51 PM