gtm-positioning
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill's Step 2 "Research — Parallel Intelligence" explicitly instructs launching subagents to "Research how competitors position themselves in [SPACE]" and "Research market dynamics," which requires fetching and interpreting public third-party web content (competitor sites, market articles, social/forum content) that could contain untrusted/user-generated instructions and would materially influence the agent's positioning decisions.
Audit Metadata