product-manager-toolkit-skill

Warn

Audited by Snyk on Aug 4, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). The runtime path scripts/customer_interview_analyzer.py reads outsider-provided free text transcripts from a user-supplied local file path (with safe_user_path(sys.argv[1]).open('r') as f: interview_text = f.read()), then ingests that text for analysis/extraction.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 4, 2026, 11:32 AM
Issues
1
Security Audit — snyk — product-manager-toolkit-skill