rating-prompt-strategy

Warn

Audited by Snyk on Mar 22, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's "Recovering from a Rating Drop" diagnosis explicitly instructs the agent to "Read the 1-star reviews for that period" (user-generated App Store/Play Store reviews), which requires ingesting untrusted public third-party content that can influence diagnosis and next actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 22, 2026, 01:39 PM
Issues
1