skills/adryanmoldokkr32-pixel/bionicbot-advanced-mechanics-security/user-feedback-loop-automator/Snyk

user-feedback-loop-automator

Warn

Audited by Snyk on Apr 18, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs the agent to "Scrape feedback from Discord, Reddit, App Store, or Support tickets," which are untrusted, user-generated third-party sources that the agent must read and act on as part of its workflow, enabling indirect prompt injection.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Apr 18, 2026, 05:56 PM

Issues

1

Security Audit — snyk — user-feedback-loop-automator