market-research-analysis

Warn

Audited by Snyk on Mar 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's required workflow and guidance (SKILL.md "Competitive Intelligence Sources" and references/data_analysis_patterns.md "Research Sources" / "Data Collection Checklist") explicitly direct the agent to ingest open/public third‑party sources — e.g., company websites, app store reviews (G2/Capterra), Crunchbase, LinkedIn, news articles and market reports — which are untrusted/user‑generated and would be read and used to drive analysis and recommendations, creating a clear vector for indirect prompt injection.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 11, 2026, 08:50 PM
Issues
1