dev-onboarding
Warn
Audited by Snyk on Jun 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). Outsider-authored free text can enter the LLM context when the skill reads deal-folder artifacts at runtime—especially meeting transcripts and other documents authored by the client/third parties—via Phase 2 (“Transcripts → delegate to a subagent” and “Proposal/MSA/POC outputs → read directly”).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata