skills/getcargohq/gtm-skills/waterfall-enrichment/Snyk

waterfall-enrichment

Warn

Audited by Snyk on Aug 21, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (low risk: 0.10). Source file SKILL.md describes running Cargo orchestration actions (waterfall.enrichContact/enrichCompany/verifyEmail) on user-supplied records/inputs, but it does not show any runtime ingestion of outsider-authored free text from a third-party feed/queue without the user first selecting specific items.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 21, 2026, 10:07 AM

Issues

1

Security Audit — snyk — waterfall-enrichment