cite-check
Warn
Audited by Snyk on Jun 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.95). Outsider free text is fetched at runtime from cited URLs (public web pages) via the host
WebFetchin Stage 2 (python scripts/prompts.py fetch ...→ WebFetch retrieve + extract), and that extracted page text is then inserted into the agent’s LLM context for claim extraction and support verdicting.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata