skills/farzadshbfn/knowledge-plugin/kb-learn/Snyk

kb-learn

Warn

Audited by Snyk on Jun 17, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.85). Outsider free text can enter the LLM context via the searcher agent’s runtime web fetching: kb-learn spawns searcher (topic/article workflows) which uses WebFetch/reader/trafilatura to fetch arbitrary third-party pages and then returns extracted article text to the orchestrator/next agents (untrusted web content).

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jun 17, 2026, 07:37 AM

Issues

1

Security Audit — snyk — kb-learn