chapter2-guide
Warn
Audited by Snyk on Feb 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to perform web searches and ingest content from open/public sources (see "7. 웹 검색 가이드" and search templates referencing Google Patents, KIPRIS, IDC, Gartner, press releases and site: searches), so the agent will read and act on untrusted third‑party content that could contain injected instructions.
Audit Metadata