skills/legalquants/lq-skills/uk-disclosure-list-review/Snyk

uk-disclosure-list-review

Warn

Audited by Snyk on Jul 8, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.70). SKILL.md:28-30 describes “Live source mode” where the skill retrieves rules/orders/filings/document lists via browser/web search/MCP/API at runtime, which can ingest outsider-authored free text from public web content into the LLM context.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 8, 2026, 08:53 AM

Issues

1

Security Audit — snyk — uk-disclosure-list-review