strategic-analysis

Warn

Audited by Snyk on Feb 21, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's required workflow (SKILL.md and readme.md) explicitly instructs the agent to "与 3 份分析師報告或市場研究的數據對比" and to "盡可能引用公開數據與研究報告佐證", which requires ingesting public third‑party analyst/market‑research content that could influence decisions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 21, 2026, 12:44 AM