brainstorm
Warn
Audited by Snyk on May 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The SKILL.md Phase 2 workflow explicitly instructs spawning an Explore agent to "Search for SOTA approaches (WebSearch)," which requires fetching and interpreting public web content that can influence decisions and tool use.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata