morning-briefing

Warn

Audited by Snyk on Feb 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill explicitly performs WebSearch/WebFetch of open web articles for EdTech, AI, K-12 leadership, and school safety news (sections 1.7–1.9b) and instructs WebFetch of public legislative bill pages (section 1.14), so it ingests arbitrary third‑party web content and is expected to read and interpret it as part of the briefing workflow.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 15, 2026, 09:27 PM