Competitor Intel

Warn

Audited by Snyk on Mar 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly requires the agent to perform Web Search and fetch/ingest open/public third-party pages (see "Data Gathering (via web search)" and Phase 2: "fetch: Competitor's pricing page and feature pages; G2/Capterra/TrustRadius comparison pages; head-to-head blog posts..."), so untrusted, user-generated web content is read and synthesized into battlecards and decision-driving outputs.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 3, 2026, 11:37 AM