deep-research
Warn
Audited by Snyk on May 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's Web Research and Ecosystem/Community Research workflow explicitly instructs fetching and reading public third‑party sources (e.g., Reddit, Hacker News, GitHub issues, app store reviews, and public blogs/changelogs like blog.cloudflare.com) and uses those findings to drive recommendations and next actions, so untrusted user-generated content can influence tool use and decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata