doc-review
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The Reference Checker Agent explicitly mentions "External URL accessibility (optional)" and the Limitations state "External URL validation requires network access," indicating the skill may fetch and parse external/public URLs linked from docs (third-party web pages) and include that content in its validation workflow, exposing the agent to untrusted user-generated content.
Audit Metadata