list-segment-builder
Warn
Audited by Snyk on Aug 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the required runtime workflow for list-segment-builder explicitly says it “Reads” the user-supplied email/CRM/GA4/ecommerce exports (CSV/exports) and also reads consent-registry text from
memory/consent/, meaning outsider-authored free text can be ingested via the exported list files the user uploads/pastes (even though it should be treated as untrusted input).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata