Plan PA Days
Warn
Audited by Snyk on May 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly tells the agent to read user-provided URLs/PDFs ("Tier 2
- Ask the user: If the user provides a URL or PDF, read the document") and to web-search and download calendar PDFs from school board websites ("Tier 3
- Web search"), meaning it ingests open/public third-party content that can directly influence planning and tool actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata