competitor-alerts

Warn

Audited by Snyk on Feb 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's workflow explicitly ingests and interprets open/public third‑party content — e.g., competitor website diffs (content/pricing pages), Google Ads Transparency Center and Meta Ad Library (ad alerts), social mention volumes, and SERP features — as required inputs for alerting and automated routing (see Process steps 1–2 and notification behaviors), so untrusted external content can directly influence decisions and notifications.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 27, 2026, 01:02 PM