dynamic-pricing

Warn

Audited by Snyk on Mar 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill explicitly requires fetching and scraping live competitor product pages from arbitrary public URLs (see evals/competitor-monitoring-price-history-sche/task.md's competitor-monitor.ts requirement and SKILL.md instructions to add competitor product URLs), so untrusted third-party page content is ingested and used to drive repricing decisions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 16, 2026, 11:22 AM
Issues
1