company-intel
Warn
Audited by Snyk on Apr 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The SKILL.md workflow explicitly fetches and scrapes public third-party webpages and data (e.g., Step 3 uses the scrapegraph smartscraper to extract content from "https://stripe.com/pricing", and Steps 1–2 call brand-dev and people-search APIs to ingest public company/leadership data), which the agent is expected to read and use to drive its analysis and decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata