heap-exploitation-dev
Warn
Audited by Snyk on Nov 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The required workflow is a local reference-reading process, but its how2heap compatibility step (pick and run a matching community-maintained
technique.cfrom an external repo) selects outsider-authored public code, so the agent must actively fetch it rather than receive it by forced delivery.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata