product-analysis

Warn

Audited by Snyk on Sep 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). The required workflow analyzes the local repository's source code, configuration files, and documentation, which are first-party and trusted. Although the skill mentions a /competitors-analysis sub-skill invocation for competitor benchmarking, it is conditional upon the compare scope and takes user-supplied parameters (competitor-url), which falls under low-risk active fetching/searching rather than monitored outsider-authored feeds.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 15, 2026, 03:06 AM
Issues
1