skills/gooseworks-ai/gooseworks-skills/meeting-brief/Snyk

meeting-brief

Warn

Audited by Snyk on Jul 10, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.85). Outsider-authored free text from public web content (LinkedIn/company/news scraped via web_search) and GitHub/memory notes is incorporated into the LLM prompt through scripts/research_person.js and scripts/generate_brief.js (the prompt embeds the research JSON as readable text for the agent’s LLM).

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 10, 2026, 03:08 PM

Issues

1

Security Audit — snyk — meeting-brief