okf-ops

Warn

Audited by Snyk on Jul 9, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.75). SKILL.md’s required workflow runs scripts/assess-okf.py / scripts/check-okf.py on a user-supplied doc tree/bundle, and those scripts read outsider-authored markdown files’ YAML frontmatter/body from disk at runtime (path.read_text(...)) and then emit derived text fields (e.g., type values, frontmatter keys, and error messages) into stdout/JSON that can be placed into the agent/LLM context.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 9, 2026, 06:30 PM
Issues
1
Security Audit — snyk — okf-ops