browser-research
Warn
Audited by Snyk on Mar 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill's SKILL.md (see "Core Research Loop" and "Source Discovery") and its reference recipes explicitly instruct the agent to open arbitrary public websites (e.g., Google and other discovered URLs), snapshot and extract text/JSON from pages, and use those results to drive navigation and actions, which exposes the agent to untrusted third‑party content that could enable indirect prompt injection.
Audit Metadata