marketplace-add-ai
Warn
Audited by Snyk on Mar 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's ai-patterns.md (referenced from SKILL.md) explicitly shows passing an arbitrary external image URL ("From a URL" example) into the Brand Review API, which means the agent ingests and interprets untrusted third-party content (external URLs) as part of its workflow and that content can influence subsequent review decisions.
Audit Metadata