proslide

Warn

Audited by Snyk on Feb 24, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's Step 1.5 "Research bổ sung" explicitly runs WebSearch, fetches and extracts findings from web pages into research-notes.md and appends [R] items into the content map (content-map.md) that are then used to generate slides, so it clearly ingests untrusted public third‑party content that can influence subsequent actions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 24, 2026, 01:55 PM