The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.

Why it was flagged

The workflow’s **Search (WebSearch)** step explicitly fetches public web content at runtime (e.g., StackOverflow/GitHub/Docs/Reddit pages) and ingests their readable text into the agent’s LLM context, which is outsider-authored free text.

Where we found it

stackoverflow.com

domain · 2 sites

The skill explicitly instructs the agent to use WebSearch to fetch content from StackOverflow (referred to as 'SO') at runtime, ingesting outsider-authored text into the LLM context.

SKILL.md

- WebSearch: `[error] [stack] [framework]` on SO, GitHub, Docs, Reddit

SKILL.md

157

- [Search Multi-Source Protocol]([REDACTED].md) — query construction, source priority (SO, GitHub Issues, Docs, Reddit), no-result

github.com

domain · 2 sites

The skill explicitly instructs the agent to use WebSearch to fetch content from GitHub (including GitHub Issues) at runtime, ingesting outsider-authored text into the LLM context.

SKILL.md

- WebSearch: `[error] [stack] [framework]` on SO, GitHub, Docs, Reddit

SKILL.md

157

- [Search Multi-Source Protocol]([REDACTED].md) — query construction, source priority (SO, GitHub Issues, Docs, Reddit), no-result

reddit.com

domain · 2 sites

The skill explicitly instructs the agent to use WebSearch to fetch content from Reddit at runtime, ingesting outsider-authored text into the LLM context.

SKILL.md

- WebSearch: `[error] [stack] [framework]` on SO, GitHub, Docs, Reddit

SKILL.md

157

- [Search Multi-Source Protocol]([REDACTED].md) — query construction, source priority (SO, GitHub Issues, Docs, Reddit), no-result

Report incorrect finding

Audited: 2 months ago
Security analysis