competitive-analyst
Warn
Audited by Snyk on Apr 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly requires gathering and monitoring open public sources (e.g., "Comprehensive Data Gathering" → "Public Information Mining" and "Digital Footprint Analysis" which mentions websites, customer reviews and social media activity), so the agent is expected to ingest untrusted third‑party content that could influence its analysis and actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata