user-generated-content

Warn

Audited by Snyk on Mar 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). This skill's SKILL.md explicitly instructs importing and embedding user-generated social media content (e.g., "sourcing Instagram UGC tagged with your brand hashtag", "Okendo imports posts tagged with your hashtag", and recommendations to use Tagembed/Smash Balloon) so the agent will fetch and process untrusted third‑party social media and forum-style content that can affect moderation and publishing decisions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 16, 2026, 11:20 AM
Issues
1