last30days
Warn
Audited by Snyk on Jul 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The
/last30daysskill ingests outsider-authored free text from Reddit comments and post bodies viareddit_enrich.enrich_reddit_item()(fetched byreddit_enrich.fetch_thread_data()from arbitrary Reddit URLs discovered from the user’stopic), and that text is then included in the “Insights”/rendered report that the agent synthesizes.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata