last30days

Warn

Audited by Snyk on Apr 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and ingests public, user-generated content from Reddit, X, YouTube, TikTok, Hacker News, Polymarket, GitHub and the web as part of its mandatory research workflow (see the SKILL.md description and required steps Step 0.55 / Step 1 / Step 2), and that external content is read and synthesized to drive recommendations, prompts, and next actions—allowing indirect prompt injection via third‑party text.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 26, 2026, 01:53 PM
Issues
1