community-discovery
Warn
Audited by Snyk on Mar 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's workflow explicitly requires searching and ingesting public, user-generated community content from directories and platforms (e.g., hive.one, slofile, disboard, Reddit, Facebook Groups, LinkedIn, Discord, and public forums) and directs the agent to read/interpret those results to score and decide next actions, which could enable indirect prompt injection.
Audit Metadata