devtu-optimize-skills
Warn
Audited by Snyk on Mar 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). Yes — the SKILL.md workflow (Phase 0: "Foundation Data") and references/optimization-patterns.md explicitly require querying public aggregators and literature sources (Open Targets, PubChem, GTEx, PubMed/OpenAlex/EuropePMC, etc.), so the agent ingests open third-party content that it must read and synthesize and that can materially influence tool use and decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata