pkgmgr-homebrew-formula-dev

Warn

Audited by Snyk on Mar 29, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md research phase and language reference docs explicitly instruct fetching public repo files and releases (e.g., use of gh api repos/OWNER/REPO/contents/..., gh api repos/owner/repo/releases/latest, and curl ...github.com/...tar.gz) and PyPI/package registry URLs to extract version, build system, dependencies, and sha256 values that are then used to generate formulas and determine build/install actions, which exposes the agent to untrusted third-party content that can influence its actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 29, 2026, 02:29 PM
Issues
1