NYC

agno

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill explicitly includes and demonstrates runtime use of web-search and forum tools—e.g., imports and examples using agno.tools.duckduckgo (DuckDuckGoTools) and agno.tools.hackernews (HackerNewsTools)—which fetch and ingest public web/search results and user-generated Hacker News content that the agent reads as part of its workflow.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 02:11 AM