deep-research
Warn
Audited by Snyk on May 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). SKILL.md's Research Protocol explicitly requires "Source Gathering: Use WebSearch, WebFetch, and MCP tools to collect evidence" and mandates citing URL sources, so the agent will fetch and interpret untrusted public web content that can influence its conclusions and actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata