marketing-council
Warn
Audited by Snyk on Aug 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The skill’s required runtime workflow only loads first-party, repo-stored advisor dossier files from
references/advisors/(and an optional product-marketing context file) and then applies them to the user’s provided marketing question; its optional “live research pass” uses web search to find primary sources by name/topic rather than ingesting outsider-authored free text via an automatically monitored queue/feed.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata