skills/crashbytes/claude-role-skills/product-owner/Snyk

product-owner

Warn

Audited by Snyk on Apr 13, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to connect to external MCP servers and fetch backlogs and stakeholder feedback from third-party tools (see SKILL.md and references/integrations.md referencing Jira, Trello, GitHub, GitLab, Confluence, etc.), meaning untrusted, user-generated content will be ingested and can influence the agent's actions.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Apr 13, 2026, 01:22 PM

Issues

1

Security Audit — snyk — product-owner