research
Warn
Audited by Snyk on May 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly requires fetching and ingesting arbitrary external web pages (see "C. Web Research" and "MANDATORY: Web Page Fetching via Markdown Converters" plus scrapling fallbacks) and uses those fetched, untrusted community pages and repo links as input for research, analysis, spawning tasks, and follow-up actions—so third-party content can materially influence agent decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata