growth-clarify
Warn
Audited by Snyk on Aug 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the runtime clarification flow is driven by the operator’s free-text answers and questions, and it may additionally fetch outsider-supplied wiki content via
paperclip-wiki-fetchwhen the operator provides a wiki URL/path or captured wiki source as proof (without first verifying trust of the provided content).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata