desk-research-sprint

Warn

Audited by Snyk on Aug 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). [Exclusion] The required runtime workflow described in SKILL.md is a structured “desk research sprint” that reads and captures findings from planned sources; the skill specification itself does not describe ingesting any outsider-authored free text via a continuously monitored/queued feed (the text exposure depends on the explicitly selected/planned sources per question, not on posting into an always-consumed inbox/feed.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 13, 2026, 12:07 PM
Issues
1
Security Audit — snyk — desk-research-sprint