afa-compete
Warn
Audited by Snyk on May 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly requires ingesting and acting on open/public third‑party content (e.g., references/ad-intelligence.md directs using Meta Ad Library, TikTok Creative Center and Google Ads Transparency; references/price-intelligence.md prescribes scraping Shopify .json via n8n; references/multi-dimensional-analysis.md and seo-gap-analysis.md require mining Amazon/Trustpilot/Reddit reviews and Ahrefs/SEMrush/SimilarWeb data), which are untrusted/user-generated sources the agent must read and which directly influence tool use, decisions, alerts and follow-up actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata