tim

Warn

Audited by Snyk on Apr 29, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). Yes — Tim explicitly dispatches skills that fetch and analyse open web content (e.g., "Employer Footprint — Full digital footprint audit with 8-agent research swarm", "Social Media Review — Lightweight social media check", and Application Optimiser's "Company research"/Glassdoor flags) and uses those untrusted public sources to drive routing, flags, and next actions in the SKILL.md workflow.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 29, 2026, 02:58 AM
Issues
1
Security Audit — snyk — tim