marketing-pipeline-auto-content

Warn

Audited by Snyk on Jun 25, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.95). The REQUIRED runtime workflow performs “Research & Content Crawling” by crawling external news/social sources (e.g., TechCrunch, Twitter, LinkedIn) and then injects the resulting research (including content strings) into the LLM prompt via buildPrompt(research, options)anthropic.messages.create({ content: prompt }), which is outsider-authored free text from public web/social content.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 25, 2026, 07:49 AM
Issues
1
Security Audit — snyk — marketing-pipeline-auto-content