skills/fourteenwm/ppc-ai-skills/sqr-pipeline/Snyk

sqr-pipeline

Warn

Audited by Snyk on Jul 30, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The LLM “Claude Task agents” in Step 2 ingest the outsider-authored Query (and related brand_names / off_brand_keywords built from the user-controlled Google Sheet “Have Cost” tab) via scripts/sqr_prep.py batching, with no requirement to select a specific item first beyond the sheet row status.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 30, 2026, 01:46 AM

Issues

1