competitor-alerts
Warn
Audited by Snyk on Feb 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's workflow explicitly ingests and interprets open/public third‑party content — e.g., competitor website diffs (content/pricing pages), Google Ads Transparency Center and Meta Ad Library (ad alerts), social mention volumes, and SERP features — as required inputs for alerting and automated routing (see Process steps 1–2 and notification behaviors), so untrusted external content can directly influence decisions and notifications.
Audit Metadata