bmad-agent-marketing-influencer
Warn
Audited by Snyk on Apr 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's influencer-identification workflow explicitly instructs the agent to use agent-browser to open and scrape public TikTok, Instagram, and YouTube pages (references/influencer-identification.md) and SKILL.md's "Starting Context" directs auditing live URLs, meaning untrusted user-generated web content is read and used to drive vetting and campaign decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata