skill-creator
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). This skill's "Step 2: Research & Analysis" explicitly tells the agent to use search_web and read_url_content to research documentation, which causes the agent to fetch and read arbitrary public web/URL content (open third-party sources) as part of its workflow, exposing it to untrusted third-party/user-generated content.
Audit Metadata