skills/grahama1970/agent-skills/discover-contacts/Snyk

discover-contacts

Warn

Audited by Snyk on Mar 17, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.90). The SKILL.md's Enrichment Pipeline explicitly calls /dogpile and /brave-search to fetch public web content (LinkedIn, news, GitHub, YouTube, etc.) and ingests those untrusted third‑party sources to build/enrich profiles and drive subsequent actions, so external page content can materially influence tool use and decisions.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Mar 17, 2026, 06:36 AM

Issues

1

Security Audit — snyk — discover-contacts