fan-operations
Warn
Audited by Snyk on Apr 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to read and respond to Xiaohongshu user-generated comments and DMs as part of its required workflow (see "When to Use" and "Step 1: Reply to Comments"), which are untrusted third-party sources that could contain instructions influencing agent behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata