neighborhood-guide-opportunity
Warn
Audited by Snyk on Jul 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). At runtime the skill calls UnifAPI endpoints like
seo/serp,seo/competitors/relevant-pages,geo/serp,news/search,maps/search, andlocal/search, which fetch and return live public web content (e.g., SERP snippets and competitor page text) authored by outsiders, and that readable text is then placed into the agent’s LLM context for scoring and evidence.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata