measure-survey-analysis
Warn
Audited by Snyk on Aug 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Skill
measure-survey-analysisingests attacker-supplied survey inputs (including open-text response excerpts) directly as “Survey results: raw response rows… or a pre-aggregated summary” and then clusters/quotes from the provided excerpts at runtime, so outsider free text can be posted into whatever system provides the survey rows.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata