post-mortem
Warn
Audited by Snyk on Feb 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly states under "Input Sources" and Phase 1 that it will "Fetch the chat export using WebFetch" for a provided URL, meaning the agent will retrieve and interpret arbitrary/shared chat exports from external URLs (untrusted user-generated content) which can directly influence its analysis and follow-up actions.
Audit Metadata