event-signals
Warn
Audited by Snyk on Apr 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and parses public, user-generated third-party content — e.g., Sessionize APIs, confs.tech JSON, Meetup and Luma via Apify, ListenNotes, and Devpost scraping as shown in SKILL.md Phase 2 and scripts/event_signals.py — and uses that content to drive signal scoring, prioritization, and downstream outreach/enrichment decisions, so untrusted page content could materially influence agent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata