afa-compete

Warn

Audited by Snyk on May 8, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill explicitly requires ingesting and acting on open/public third‑party content (e.g., references/ad-intelligence.md directs using Meta Ad Library, TikTok Creative Center and Google Ads Transparency; references/price-intelligence.md prescribes scraping Shopify .json via n8n; references/multi-dimensional-analysis.md and seo-gap-analysis.md require mining Amazon/Trustpilot/Reddit reviews and Ahrefs/SEMrush/SimilarWeb data), which are untrusted/user-generated sources the agent must read and which directly influence tool use, decisions, alerts and follow-up actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 8, 2026, 12:58 AM
Issues
1
Security Audit — snyk — afa-compete