skills/openfunnel/openfunnel-skills/find-companies-with-active-buying-windows-and-the-people-involved/Snyk
find-companies-with-active-buying-windows-and-the-people-involved
Warn
Audited by Snyk on Apr 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill fetches and presents "inline signal content" and activity-derived signals from the OpenFunnel API (see "Get Signal Results" POST /api/v1/signal/ and "Get Account Details (V2 Batch)" POST /api/v2/account/batch) as part of its required workflow, which clearly ingests and acts on third-party/public signal content (e.g., social posts, public activity) that could contain untrusted instructions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata