launch-positioning-builder
Warn
Audited by Snyk on Apr 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's Phase 1 "Competitive Landscape Research" explicitly directs the agent to use web_search and fetch_webpage to retrieve competitor homepages/pricing/about pages and (optionally) review-site-scraper to mine G2/Capterra reviews, meaning it ingests untrusted public websites and user-generated reviews that the agent will read and use to drive positioning decisions and subsequent actions, creating a clear avenue for indirect prompt injection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata