skills/jasonnoahchoi/chingu/cold-email-personalization/Snyk

cold-email-personalization

Warn

Audited by Snyk on Mar 25, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.90). The skill's Personalization Process Step 1 explicitly instructs the agent to research prospects by fetching content from public sources (Website, LinkedIn, News, Reviews, Job postings) and the Integration Points list WebSearch/WebFetch, meaning the agent will ingest untrusted third-party web/user-generated content to drive email drafting decisions.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Mar 25, 2026, 06:24 AM

Issues

1