prd-v03-features-value-planning
Warn
Audited by Snyk on Feb 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill explicitly instructs (assets/competitive-feature-matrix.md and SKILL.md) to pull feature lists and usage evidence from competitor websites, G2/Capterra, user reviews and forums (public third-party sources) as CFD- evidence that the agent must read and use to influence feature classification and prioritization, creating clear exposure to untrusted third-party content.
Audit Metadata