qwoted-seo-backlinks
Warn
Audited by Snyk on May 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and parses open/public third‑party content: the Stage 2/Stage 4 scripts and SKILL.md describe scraping Qwoted opportunity pages (journalist requests) via qwoted_search.py / qwoted_pitch.py and the STATISTICS_PAGE_PLAYBOOK.md requires running web searches and "FETCH the page" for external sources (analyst reports, vendor/state‑of‑X pages, government data, etc.) which the agent must read and incorporate into research pages and pitches, so untrusted user-generated/public web content can directly influence decisions and tool actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata