skills/nomadamas/k-skill/local-election-candidate-search/Snyk

local-election-candidate-search

Warn

Audited by Snyk on May 25, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 1.00). The skill explicitly fetches and parses public HTML from the NEC integrated search page (https://info.nec.go.kr/search/searchCandidate.xhtml) as a required part of its workflow, so untrusted third‑party content from that site is read and can directly influence the agent's outputs.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

May 25, 2026, 06:08 AM

Issues

1