worked-examples
Warn
Audited by Snyk on Mar 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly configures web-research MCP servers (e.g.,
/cc-mcp add perplexityin Tutorial 1) and defines a library-researcher agent that includes the WebFetch tool and instructs it to "search for official documentation using Context7" (Tutorial 4), so the agent is expected to fetch and interpret open/public web content that can materially influence its outputs and actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata