nova-act
Warn
Audited by Snyk on Oct 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The agent skill is a browser automation SDK (Nova Act) that navigates web pages and executes browser commands against arbitrary websites specified by the user or agent, but it does not run a continuous workflow that monitors or ingests outsider-authored free text (like support tickets or email feeds) without selection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata