team-skills
Warn
Audited by Snyk on Aug 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). team-skills reads first-party manifests from
{REPO_ROOT}/.skills.jsonand{TEAM_AI_DIRECTIVES}/.skills.json, and only downloads outsider-authoredSKILL.mdfor “external” skills when explicitly selected for installation (it does not ingest arbitrary free text submitted by an outsider into a monitored feed/queue).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata