competitor-alerts

Warn

Audited by Snyk on Apr 1, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's workflow explicitly ingests and interprets open/public third‑party content — e.g., competitor website diffs (content/pricing pages), Google Ads Transparency Center and Meta Ad Library (ad alerts), social mention volumes, and SERP features — as required inputs for alerting and automated routing (see Process steps 1–2 and notification behaviors), so untrusted external content can directly influence decisions and notifications.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 1, 2026, 01:18 AM
Issues
1