marketing-pipeline-share-content-automation
Warn
Audited by Snyk on Jun 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). The required runtime workflow calls
ResearchService.search()(viaPOST /api/researchand the pipeline’s research step) which “crawls real-time data” from outsider sources like TechCrunch/X/LinkedIn through RapidAPI, and that fetched outsider page/comment text is then JSON-stringified and injected into the LLM prompt inPOST /api/generateasResearch data: ${JSON.stringify(research)}.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata