landing-page-ads-match
Warn
Audited by Snyk on Mar 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). Yes — the SKILL.md Core Workflows and Templates explicitly require the agent to inspect and analyze external landing page URLs (e.g., "Landing Page Alvo: URL: https://www.seusite.com.br/...") and to use third‑party tools like Google PageSpeed Insights, Hotjar and analytics to read public sites, meaning untrusted web content is fetched and used to drive decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata