pinterest-pin-generation

Warn

Audited by Snyk on Feb 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). This skill's SSE event spec (references/SSE-EVENTS.md) and the "Web Search" event flow explicitly show the agent issuing web_search_query and receiving web_search_citations (public URLs) and using those results to form responses, meaning it ingests open/public third-party content that could influence tool use and decisions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 20, 2026, 07:57 AM