market-researcher
Warn
Audited by Snyk on Apr 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill's "Competitive Intelligence Gathering" workflow explicitly instructs the agent to use public/untrusted sources—company websites, app store reviews, social media, Crunchbase, LinkedIn—which the agent would read and interpret to inform competitive analysis and decisions, exposing it to indirect prompt-injection from third-party content.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata