create-output-format
Warn
Audited by Snyk on Mar 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to "Fetch and read all provided documentation using WebFetch" (SKILL.md Step 1: Research) and then requires using that external documentation to derive concrete API calls and commands, so arbitrary external docs/URLs could influence agent behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata