competitor-alternatives

Warn

Audited by Snyk on Feb 21, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 1.00). The SKILL.md "Research Process" and "Content research" sections explicitly require mining reviews from public sites (G2, Capterra, TrustRadius), checking competitor websites/pricing/changelogs, and using customer reviews—i.e., ingesting untrusted, user-generated and public web content to inform comparison pages—so third-party content would be read and used to drive decisions and page generation.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 21, 2026, 04:26 PM