competitor-monitoring-system
Warn
Audited by Snyk on Apr 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill explicitly runs scrapers and web searches against public, user-generated third-party sources (e.g., reddit-post-finder, hacker-news-scraper, twitter-mention-tracker, linkedin-profile-post-scraper, blog-feed-monitor, google-ad-scraper, review-site-scraper pulling G2/Capterra/Trustpilot, and web_search against the Meta Ad Library) and uses that content to generate intelligence reports and recommended actions, so untrusted external content can materially influence agent behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata