external-instruction-follower
Fail
Audited by Snyk on Sep 9, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (medium risk: 0.30). The skill delegates agent behavior to external instructions, introducing indirect prompt injection risks.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The workflow instructs the agent to read and follow instructions from an external webpage via payload.md, exposing it to arbitrary web content.
Issues (2)
E004
CRITICALPrompt injection detected in skill instructions.
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata