salary-negotiation-prep
Warn
Audited by Snyk on Aug 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The workflow text only describes using user-provided negotiation inputs and (at most) researching market rates via explicitly defined salary sources (Levels.fyi, Glassdoor, LinkedIn Salary, Blind, PayScale, H1B records), but it does not show any runtime path where outsider-authored free text is ingested before selecting a specific item; the only clear outsider text entry point is the user’s own prompt.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata