market-analysis
Warn
Audited by Snyk on Mar 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's required workflow explicitly instructs the agent to perform WebSearch and ingest content from company websites, product pages, reviews/customer complaints and industry reports (see Step 2 "Research competitors" and Steps 3–4), meaning it will fetch and interpret untrusted public web/user-generated content that can materially influence decisions (market sizing, SWOT) and thus could enable indirect prompt injection.
Audit Metadata