ship-learn-next
Warn
Audited by Snyk on Mar 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's required workflow (Step 1: "Read the file the user provides (transcript, article, notes)" and the YouTube transcripts / Articles/Tutorials sections) instructs the agent to ingest and interpret user-provided/public third-party content via the Read tool and then base Ship-Learn-Next plans and follow-up actions on that content, so untrusted instructions in such material could influence the agent's decisions.
Audit Metadata