kiro-specs
Warn
Audited by Snyk on Mar 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's Design phase explicitly requires conducting research using web search/documentation and the skill's metadata allows WebSearch/WebFetch (see references/phase-2-design.md and SKILLS2.md allowed-tools), so the agent will fetch and read open/public third-party web content which can influence design and task decisions.
Audit Metadata