listener-creator

Warn

Audited by Snyk on Aug 6, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). The runtime workflow ingests outsider-authored free text from the user’s email body/subject (i.e., external message content) and passes it into context.callAgent() in the listener handler functions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 6, 2026, 04:52 PM
Issues
1
Security Audit — snyk — listener-creator