activity-planning
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly requires monitoring and verifying user-generated posts via "Hashtag Tracking (UGC activities)" and "native platform search, third-party tools" on Xiaohongshu (public social posts/comments) which the agent would read and act on (e.g., qualify/disqualify entries and select winners), exposing it to untrusted third-party content that can influence decisions.
Audit Metadata