ln-310-multi-agent-validator

Warn

Audited by Snyk on May 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill mandates "current-web best-practice research" in SKILL.md Phase 3 and the agent prompt templates (e.g., references/agents/prompt_templates/modes/*.md) state "You HAVE internet access — use it for web research" and the agent delegation docs (references/agent_delegation_pattern.md) allow agents to read Linear and web URLs directly, meaning untrusted public web and user-generated sources are fetched and their findings are read and used to drive verification, merge, repairs, and refinement decisions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 12, 2026, 06:28 AM
Issues
1