bambu-slicer
Warn
Audited by Snyk on May 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to browse and download user-generated models from MakerWorld via the agent-browser (SKILL.md: "Navigate to https://makerworld.com/...", "Click 'Download raw model files'"), and to inspect source 3MF metadata and model pages to choose slicing profiles and arrange prints, so untrusted third‑party content from MakerWorld is fetched, interpreted, and can materially influence tool usage and decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata