content-quality-auditor
Warn
Audited by Snyk on Aug 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The
content-quality-auditorskill reads the target artifact/body (including when provided as “”) and, on URL resolution, treats page text (and related untrusted evidence like embedded prompts/comments) as evidence, so outsider-authored free text can be ingested via user-supplied artifact content/URLs at runtime.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata