skills/aradotso/mcp-skills/idea-reality-mcp-validation/Snyk

idea-reality-mcp-validation

Warn

Audited by Snyk on May 17, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.80). This skill's idea_check tool explicitly fetches and ingests untrusted, user-generated content from public sources (GitHub, Hacker News, npm, PyPI, Product Hunt, Stack Overflow) and the SKILL.md shows the agent must read evidence/top_similars and use reality_signal/pivot_hints to drive decisions, enabling indirect prompt injection.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

May 17, 2026, 10:56 AM

Issues

1

Security Audit — snyk — idea-reality-mcp-validation