investor-research
Warn
Audited by Snyk on Mar 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's required workflow (step 3 "Build the raw list") and the "Sourcing Investor Information" section explicitly instruct the agent to research and ingest public third‑party sources (Crunchbase/PitchBook, firm websites, Twitter/X, Substack, SEC filings) and to capture source URLs, meaning untrusted user-generated/public content is read and used to drive tiering, conflict checks, and outreach decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata