nuclei
Warn
Audited by Snyk on Nov 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The required workflow runs nuclei against user-supplied targets and pulls community templates via
-update-templates, so outsider-authored content (target HTTP responses and public community template text) reaches the agent only after it actively fetches or scans specific items, which makes this low rather than medium.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata