positioning-truth-tracer

Warn

Audited by Snyk on Aug 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). SKILL.md’s runtime workflow ingests competitor messaging scraped/searched from external pages via Firecrawl/Tavily (data sources “Competitor messaging used to re-test the onlyness statement can be pulled… (scrape) or… (search)”) and treats that scraped free text as untrusted input, so an outsider can poison the re-test content it consumes.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 20, 2026, 07:28 PM
Issues
1
Security Audit — snyk — positioning-truth-tracer