upskill

Warn

Audited by Snyk on Aug 19, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). The required workflow’s targeted mode (/upskill <URL> Step 2.1–2.3) uses WebFetch to retrieve and extract free-form text from an outsider-provided URL (job posting content), and that extracted text is then ingested to determine required/preferred skills and to drive later WebSearch-based resource selection.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 19, 2026, 07:19 PM
Issues
1
Security Audit — snyk — upskill