search-first
Warn
Audited by Snyk on Aug 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). In SKILL.md, the required “researcher agent” workflow performs external searches over npm/PyPI/MCP/GitHub/Web and then evaluates returned candidate information, which can include outsider-authored free text.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata