competitor-monitor
Warn
Audited by Snyk on Aug 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). SKILL.md’s workflow fetches outsider-authored HTML from user-specified competitor page URLs (via
varormemory/competitors.md) in Step 2 (“node scripts/competitor-monitor.mjs snapshot <url…>”), then ingests extracted titles/headings/CTAs/prices and diffs them in Step 3/5.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata