competitive-intelligence-skill
Warn
Audited by Snyk on Aug 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). SKILL.md describes “ALWAYS (works standalone via web search)” and in Phase 2/3 and Phase 4 it gathers competitor data from public web sources (product pages, pricing, blogs, release notes, reviews, job postings), meaning outsider-authored free text from the web is ingested at runtime via the skill’s research flow.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata