create-prompt-plan
Warn
Audited by Snyk on Mar 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's required Step 4 (the "Cross-reference validation agent") explicitly instructs agents to verify references by checking external resources (other codebases, documentation, APIs, and search terms), which requires fetching and interpreting public third‑party content that could contain untrusted/user‑generated instructions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata