pkgmgr-homebrew-formula-dev
Warn
Audited by Snyk on Mar 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md research phase and language reference docs explicitly instruct fetching public repo files and releases (e.g., use of
gh api repos/OWNER/REPO/contents/...,gh api repos/owner/repo/releases/latest, andcurl ...github.com/...tar.gz) and PyPI/package registry URLs to extract version, build system, dependencies, and sha256 values that are then used to generate formulas and determine build/install actions, which exposes the agent to untrusted third-party content that can influence its actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata