skills/rshankras/claude-code-apple-skills/product-agent/Snyk

product-agent

Warn

Audited by Snyk on Aug 2, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The Product Agent performs web research via WebSearch/WebFetch, which means outsider-authored free text from the web (e.g., competitor pages/results/reviews) can be ingested during the research process without any explicit requirement to select a specific pre-approved item first.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 2, 2026, 01:20 PM

Issues

1