skills/jianshuo/claude-skills/wjs-promoting-skills/Snyk

wjs-promoting-skills

Warn

Audited by Snyk on Sep 18, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (low risk: 0.10). The research-marketplaces.sh script and corresponding prompt (prompts/research-marketplaces.md) instruct the agent to fetch and search external web sources including ClawHub, skillsmp.com, X (Twitter) search, Reddit r/ClaudeAI, and Hacker News using WebFetch, WebSearch, and xurl search, which ingest outsider-authored free text.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 18, 2026, 07:15 AM

Issues

1