skills/adobe/aio-commerce-sdk/commerce-app-api-mesh/Snyk

commerce-app-api-mesh

Warn

Audited by Snyk on Sep 15, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (low risk: 0.10). The required workflow references an external reference URL (https://raw.githubusercontent.com/adobe-commerce/api-mesh-starter-kit/refs/heads/main/llm.txt) which the agent is instructed to load, exposing the agent to GitHub-hosted documentation/text.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 15, 2026, 09:32 AM

Issues

1

Security Audit — snyk — commerce-app-api-mesh