docs-lookup
Warn
Audited by Snyk on Mar 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). Yes — SKILL.md explicitly directs the agent to use Context7, Fetch, and FireCrawl to retrieve and summarize documentation and user-provided URLs (public websites/multi-page sites), meaning the agent will ingest untrusted third‑party content that can contain actionable instructions and influence subsequent actions.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill fetches arbitrary user-provided external URLs at runtime via Fetch/FireCrawl (e.g., user-supplied https://... URLs) and injects that retrieved content into the model context to guide responses, so remote content can directly control agent prompts.
Audit Metadata