course-update-strategy
Warn
Audited by Snyk on May 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md workflows explicitly instruct the agent to research and ingest content from public third-party platforms (e.g., "pesquisar nos 5 cursos mais vendidos ou bem avaliados em plataformas como Hotmart ou Udemy" in Workflow 2 and the checklist to "Coletar feedback qualitativo de alunos via pesquisas, comentários e fóruns"), which are untrusted/user-generated sources used to drive prioritization and update decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata