research
Warn
Audited by Snyk on Jul 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). SKILL.md’s workflow ingests external information only by actively searching/fetching canonical primary sources (official docs, upstream changelogs/releases, specs) and using community corroborators as secondary evidence; it does not describe reading any continuously submitted outsider-authored feed like email/chat/issue text without first selecting specific items.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata