skills/severity1/claude-code-prompt-improver/prompt-improver/Snyk

prompt-improver

Warn

Audited by Snyk on Oct 12, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (low risk: 0.10). The skill workflow involves reading arbitrary web pages using WebFetch and WebSearch during the research phase, which allows an attacker who publishes content online to introduce indirect prompt injection.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Oct 12, 2026, 03:35 AM

Issues

1