market-research-analysis
Warn
Audited by Snyk on Mar 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's required workflow and guidance (SKILL.md "Competitive Intelligence Sources" and references/data_analysis_patterns.md "Research Sources" / "Data Collection Checklist") explicitly direct the agent to ingest open/public third‑party sources — e.g., company websites, app store reviews (G2/Capterra), Crunchbase, LinkedIn, news articles and market reports — which are untrusted/user‑generated and would be read and used to drive analysis and recommendations, creating a clear vector for indirect prompt injection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata