acedatacloud-api

Warn

Audited by Snyk on Apr 6, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill documentation explicitly describes services that fetch and return content from the open web—e.g., "Service Categories" lists "Search: Google Search (web/images/news/maps)" and the "Request Patterns" show passing external image URLs (image_url) to face analysis—which indicates the API will ingest untrusted public third-party content that an integrating agent is expected to read and act on.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 6, 2026, 04:59 PM
Issues
1
Security Audit — snyk — acedatacloud-api