intlayer-cli
Warn
Audited by Snyk on Mar 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly pulls and live-syncs dictionaries from the Intlayer editor/CMS (references/concept_cli_pull.md and references/concept_cli_live.md) and the docs state remote dictionary content (e.g., a filePath field) will be written/used by the CLI, so untrusted/user-provided CMS content is ingested and can materially change tool behavior (overwrite files/paths).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata