app-launch
Warn
Audited by Snyk on Apr 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's workflow explicitly instructs monitoring and responding to user-generated content — e.g., "Identify relevant communities (Reddit, Discord, forums, Twitter/X)", "Monitor social mentions", and "Respond to every review (run
review-management)" — which requires ingesting untrusted third-party posts/reviews that could influence agent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata