Skills
skills/amelnagdy/delegate-skills/agy-delegate/Snyk

agy-delegate

Warn

Audited by Snyk on Jul 29, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). In scripts/relay.mjs, the orchestrator-provided brief (outsider-authored free text if supplied via --brief or stdin) is read by readBrief() and then passed directly to agy --print=<brief> in dispatchToAgy(), exposing that text to the downstream agent at runtime.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 29, 2026, 10:16 PM
Issues
1
Security Audit — snyk — agy-delegate