ln-230-story-prioritizer
Warn
Audited by Snyk on Mar 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's Phase 3 "Research Market Size" and Research Tools (and supporting references/research_queries.md and competition_index.md) explicitly instruct the agent to run WebSearch and mcp__Ref against public websites, news, blogs and forums and to extract URLs/sources that are then used to compute RICE scores and priority decisions, so untrusted third-party content can directly influence the agent's actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata