treatment-demand-radar
Warn
Audited by Snyk on Jul 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). At runtime the skill calls UnifAPI endpoints that fetch and return public web/marketplace/social content (e.g.,
geo/serpgenerative answers with cited sources andtiktok/hashtags/{id}/videosmetadata), which is outsider-authored free text that the agent then places into its LLM context for scoring and reporting.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata