naming
Warn
Audited by Snyk on Mar 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's required workflow (SKILL.md "What This Does" and "Step 1: Read the Project") instructs the agent to check GitHub for popular repos and search for existing products / domain availability on public TLDs, which requires fetching and interpreting untrusted public web/user-generated content that can materially affect naming decisions and follow-up actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata