qwoted-seo-backlinks

Warn

Audited by Snyk on May 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and parses open/public third‑party content: the Stage 2/Stage 4 scripts and SKILL.md describe scraping Qwoted opportunity pages (journalist requests) via qwoted_search.py / qwoted_pitch.py and the STATISTICS_PAGE_PLAYBOOK.md requires running web searches and "FETCH the page" for external sources (analyst reports, vendor/state‑of‑X pages, government data, etc.) which the agent must read and incorporate into research pages and pitches, so untrusted user-generated/public web content can directly influence decisions and tool actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 3, 2026, 08:06 AM
Issues
1