us-program-research
Warn
Audited by Snyk on Mar 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's workflow (Phase 2 and Phase 3 in SKILL.md, plus references/subagent-prompts.md and references/research-sources.md) explicitly instructs subagents to fetch and synthesize content from open public sources — e.g., Reddit, Niche, GMAT Club, GradCafe and program web pages — and then uses that user-generated/untrusted content to compute scorecards and drive ranking/recommendation decisions.
Audit Metadata