course-affiliate-program
Warn
Audited by Snyk on May 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The SKILL.md workflows explicitly instruct researching and using public, user-generated sources—e.g., "Prospecção Direta: Pesquisar e identificar 20-30 potenciais afiliados (influenciadores... no LinkedIn/YouTube)" and daily monitoring of Hotmart dashboards and Telegram/WhatsApp groups—meaning the agent is expected to read/interpret open third-party content (public profiles, posts, dashboards, chat channels) that can materially influence recruitment, onboarding, and optimization decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata