magi-ex
Warn
Audited by Snyk on Mar 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill explicitly instructs teammates to perform web searches and ingest open web content (see personalities/MAGI-1.md "Search online -- use
WebSearch" and the references/codex.md and references/gemini.md templates that state "search online for relevant prior art" and direct file/CLI reads), so it clearly ingests untrusted public third‑party content that can influence proposals and downstream actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata