skills/athina-ai/goose-skills/competitor-signals/Snyk

competitor-signals

Warn

Audited by Snyk on Apr 12, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and ingests public, user-generated content from Product Hunt (API or Apify scraper), Hacker News (Algolia), and manually-scraped competitor pages/tech press (SKILL.md + scripts), and it parses those comments/posts to detect "switching signals" that directly drive enrichment and outreach actions.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Apr 12, 2026, 02:42 PM

Issues

1