proposal-generator

Warn

Audited by Snyk on May 4, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 1.00). The skill's Phase 2 "Research" step explicitly requires using web_search and searching public web sources (see "Phase 2: Research" and references/research_checklist.md) to ingest market, competitor, regulatory, and case-study content that the agent must read and use to drive proposal decisions, so it clearly consumes untrusted third‑party web content that can influence actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 4, 2026, 02:33 PM
Issues
1