find-comparables
Warn
Audited by Snyk on Jun 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow explicitly instructs fetching and extracting “official docs, live repository trees, design docs, ADRs, talks by maintainers” and “current web/GitHub search,” which can ingest outsider-authored free text (e.g., README/design docs/issues/discussion content from public web/GitHub) into the agent’s LLM context via the retrieved page/repo text.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata