competitive-intel
Warn
Audited by Snyk on Apr 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The SKILL.md workflow explicitly directs tracking competitor "Product moves" and other dimensions using public/untrusted sources (e.g., G2/Capterra reviews, Twitter/LinkedIn, Crunchbase, TechCrunch, pricing pages, job sites, review sites) and requires updating battlecards and triggering responses based on that external intel, which means the agent is expected to ingest and act on arbitrary third‑party content.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata