RAG Pipeline Builder
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's ingestion workflow explicitly includes document loaders such as HTML parsers and "API connectors for live sources" and instructs returning source chunks with responses, meaning the agent can fetch andread untrusted third-party web/API content as part of its runtime retrieval and synthesis.
Audit Metadata