writing-skills
Warn
Audited by Snyk on Apr 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill documentation explicitly instructs/acknowledges fetching third‑party packages and repos (see "Package dependencies" / "Install required package: pip install pypdf" and the note "claude.ai: Can install packages from npm and PyPI and pull from GitHub repositories"), which means the agent may download and execute untrusted public code that can influence its actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata