kr-gov-grant
Warn
Audited by Snyk on May 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs the agent to perform web searches and check public government sites (see "MODE 1 — 탐색 절차" step 3 and "웹 검색 활용 원칙" listing k-startup.go.kr, bizinfo.go.kr, iris.go.kr, etc.), meaning it fetches and interprets open/public third‑party content that can change recommendations and next actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata