saccoai-competitive-analysis
Warn
Audited by Snyk on Mar 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill's Phase 1 "Crawl All Sites" (including the Auto-discovery step that uses agent-browser to search the web) explicitly fetches and ingests content from public competitor websites and search results, and then reads and interprets that untrusted third‑party content to produce benchmarks, recommendations, and proposal content, which could allow indirect prompt injection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata