evidence-synthesis

Warn

Audited by Snyk on Apr 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill's Step 4 explicitly requires searching or ingesting content from public third‑party sources (e.g., WHO, UNFPA, PubMed, Scopus) and/or user‑provided sources/library subfolders, and Step 5 requires extracting and using those findings to drive synthesis and recommendations, so external content can directly influence the agent's decisions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 26, 2026, 10:31 PM
Issues
1