scan-roles
Warn
Audited by Snyk on May 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and parses public third‑party job postings (ATS APIs such as Greenhouse/Lever/Ashby and fallback company career pages via WebSearch/WebFetch per the "How to Scan Each Company" and "Extract JD text" steps) and uses that content to filter roles and compute fit, so untrusted external content can materially influence its decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata