google-analytics
Warn
Audited by Snyk on May 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The SKILL.md "How to use" step 1 explicitly instructs the agent to scrape/inspect arbitrary website source code (e.g., using web scraping tools or native page requests to look for G-XXXXXXXXXX IDs), which requires fetching untrusted public web pages and using their content to decide setup/integration actions, creating a pathway for indirect prompt injection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata