captain-data
Warn
Audited by Snyk on Apr 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly describes using Captain Data to extract/enrich data from the open web (e.g., the "Popular actions" list and "Enrich Person" which retrieves LinkedIn profile data) and shows proxying requests through Membrane to Captain Data's API, so the agent will ingest untrusted, user-generated third‑party content as part of its workflow.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata