dynamic-pricing
Warn
Audited by Snyk on Mar 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly requires fetching and scraping live competitor product pages from arbitrary public URLs (see evals/competitor-monitoring-price-history-sche/task.md's competitor-monitor.ts requirement and SKILL.md instructions to add competitor product URLs), so untrusted third-party page content is ingested and used to drive repricing decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata