annotate-article-screenshots

Warn

Audited by Snyk on Jul 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.75). The required workflow relies on the user-provided “article’s Clueso project” (step text and screenshots) which is outsider-authored content, and that text is used by the agent at runtime to drive annotations (SKILL.md:14-15, 21-24).

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 10, 2026, 09:42 AM
Issues
1
Security Audit — snyk — annotate-article-screenshots