competitive-analysis

Warn

Audited by Snyk on Mar 23, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 1.00). The skill's workflow (SKILL.md: "Analyze competitor pricing" and "Monitor competitors systematically" / "Signal sources") explicitly directs the agent to capture and use public third-party content—pricing pages, G2/Capterra reviews, LinkedIn job postings, blogs/Google Alerts/RSS, SEC filings—which are untrusted/user-generated sources that the agent is expected to read and use as evidence to drive decisions and actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 23, 2026, 01:05 PM
Issues
1
Security Audit — snyk — competitive-analysis