skills/quick-brown-foxxx/myai/upstream-source-research/Snyk

upstream-source-research

Warn

Audited by Snyk on Apr 30, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.90). This skill explicitly directs the agent to fetch and inspect public, user-generated third-party sources—e.g., GitHub/GitLab hosted views, web fetches, and shallow clones via gh/glab as described in SKILL.md—which the agent will read and use to drive research decisions.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Apr 30, 2026, 11:55 AM

Issues

1

Security Audit — snyk — upstream-source-research