lead-research-assistant
Warn
Audited by Snyk on Mar 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's required workflow ("Research and Identify Leads" and the Examples) instructs the agent to search public websites—company sites, LinkedIn profiles, GitHub repos, job postings, and news—and to read and use that untrusted, user-generated/open-web content to score leads and determine outreach actions, which could allow indirect prompt injection.
Audit Metadata