indication-dossier
Warn
Audited by Snyk on Aug 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). SKILL.md’s workflow ingests outsider-authored free text only from the
indication/additional_contextinputs (user-supplied), which it uses as search terms for CT.gov/PubMed/web queries rather than reading arbitrary user-submitted documents; the LLM-readable free-text injection surface is therefore confined to these parameters and does not include arbitrary queue/feed/ticket-style content.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata