menu-demand-radar
Warn
Audited by Snyk on Jul 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). At runtime the skill calls UnifAPI endpoints that fetch and ingest public web/AI/social content (e.g.,
geo/serpcaptures AI answer text + cited sources;tiktok/search/tiktok/hashtags/{id}/videosread public video metadata/captions), which is outsider-authored free text that can be fed into the agent’s LLM context.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata