course-update-strategy

Warn

Audited by Snyk on May 2, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The SKILL.md workflows explicitly instruct the agent to research and ingest content from public third-party platforms (e.g., "pesquisar nos 5 cursos mais vendidos ou bem avaliados em plataformas como Hotmart ou Udemy" in Workflow 2 and the checklist to "Coletar feedback qualitativo de alunos via pesquisas, comentários e fóruns"), which are untrusted/user-generated sources used to drive prioritization and update decisions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 2, 2026, 05:49 PM
Issues
1
Security Audit — snyk — course-update-strategy