proposal-generator
Warn
Audited by Snyk on May 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's Phase 2 "Research" step explicitly requires using web_search and searching public web sources (see "Phase 2: Research" and references/research_checklist.md) to ingest market, competitor, regulatory, and case-study content that the agent must read and use to drive proposal decisions, so it clearly consumes untrusted third‑party web content that can influence actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata