vibe-research
Warn
Audited by Snyk on Mar 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). Step 4 of SKILL.md explicitly requires using "WebSearch to gather current information" (competitors, technical approaches, cost estimates, similar projects), meaning the agent will fetch and read untrusted public web content that can materially influence its recommendations and actions.
Audit Metadata