startup-validator
Warn
Audited by Snyk on Feb 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly mandates conducting "10-15 web searches" and states "CRITICAL: Use
web_fetchto read full articles from authoritative sources (Gartner, McKinsey, Statista, Crunchbase...)" — the agent is therefore required to fetch and interpret open third-party web content as part of its analysis, which can materially influence its actions.
Audit Metadata