explaining-complex-concepts
Warn
Audited by Snyk on Apr 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs resource curation from web articles, videos and interactive tools (see "Quick Start" with scripts/find-resources.js "Find Resources" and the "Resource Curation Strategy" listing YouTube, blogs, etc.), which indicates the agent will fetch and consume open/public third‑party (user-generated/untrusted) content as part of its workflow and could let that content influence its actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata