web3-protocol-gtm

Warn

Audited by Snyk on Apr 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs agentic workflows to monitor and act on open/public user-generated sources — e.g., "Agentic DevRel: Monitor GitHub commits, follow up on inactive builders automatically" and numerous CT (Crypto Twitter/X) engagement/monitoring steps in the "CT Narrative Playbook" — meaning the agent is expected to ingest untrusted third‑party social/web content and use it to drive tool actions and decisions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 12, 2026, 01:12 AM
Issues
1