prd-taskmaster-v2
Warn
Audited by Snyk on Apr 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly invokes external research providers and web-backed tools (e.g., "task-master research", Perplexity, WebSearch and MCP search/reason tools) as part of its workflows—see companion-skills/expand-tasks/SKILL.md and SKILL.md/CLAUDE.md—which means the agent will fetch and interpret untrusted public web/user-generated content that can influence task generation, expansion, and handoff decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata