desk-research-sprint
Warn
Audited by Snyk on Aug 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). [Exclusion] The required runtime workflow described in SKILL.md is a structured “desk research sprint” that reads and captures findings from planned sources; the skill specification itself does not describe ingesting any outsider-authored free text via a continuously monitored/queued feed (the text exposure depends on the explicitly selected/planned sources per question, not on posting into an always-consumed inbox/feed.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata