posit-news
Warn
Audited by Snyk on Mar 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly instructs the agent to use WebFetch to retrieve and parse public Posit and related sites (e.g., https://posit.co/feed/, https://www.tidyverse.org/blog/, https://quarto.org/docs/blog/, the Posit sitemaps and podcast page), so the agent will read untrusted public web content and use that content to decide which items to present and how to categorize them—opening the possibility of indirect prompt injection.
Audit Metadata