local-reporting
Warn
Audited by Snyk on Mar 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). This skill's SKILL.md explicitly instructs automated ingestion of public, user-generated third-party data (e.g., "Reviews | GBP API or third-party scrape" and the "API-Driven Data Collection" / "Tools for Local Reporting" sections listing Local Falcon, GBP/Google Reviews, third‑party aggregators), which the agent is expected to read and interpret to drive reporting decisions and follow-up actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata