idea-validation
Warn
Audited by Snyk on Mar 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's Phase 2 "Demand Signal Gathering" explicitly requires checking and interpreting public, user-generated sources (e.g., Reddit, HN, Twitter/X, Google Trends, App Store/G2 reviews, LinkedIn/Indeed), which are untrusted third-party pages whose content will directly influence the agent's validation decisions.
Audit Metadata