create-prompt-plan

Warn

Audited by Snyk on Mar 14, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill's required Step 4 (the "Cross-reference validation agent") explicitly instructs agents to verify references by checking external resources (other codebases, documentation, APIs, and search terms), which requires fetching and interpreting public third‑party content that could contain untrusted/user‑generated instructions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 14, 2026, 04:32 PM
Issues
1