cofounder-matching
Warn
Audited by Snyk on Jul 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). El flujo requerido en “Paso 3 — Collect candidates” solicita/ingiere datos de candidatos (p. ej., claims y evidencia) que provienen de entradas de terceros (outsider-authored) y luego se usan para generar
scorecard.md,gap-analysis.mdeinterview-questions.md, alimentando texto libre del candidato/terceros al contexto del LLM.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata