travel-planner

Warn

Audited by Snyk on Apr 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill's reference workflows explicitly state that missing market or travel information will be "보완" via web searches (e.g., "시장 정보 부족 | 웹 검색으로 보완" in references/side-project-launcher.md and "정보 불완전 | 웹 검색으로 보완" in references/travel-planner.md), which indicates the agent will fetch and use open/public web content (untrusted, user-generated) to inform analyses and decisions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 13, 2026, 11:43 PM
Issues
1