skill-finder
Warn
Audited by Snyk on Oct 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The skill workflow involves searching, indexing, and installing agent skills from GitHub repositories (via tools like
ghandcurl), which ingests external repository data and documentation files (SKILL.md) authored by third parties.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata