skills/bizshuk/llm_plugin/Wallet Architecture Review/Snyk

Wallet Architecture Review

Warn

Audited by Snyk on May 6, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.90). The skill's required workflow "Review Merge Request" (SKILL.md) accepts an mr_link parameter and directs the agent to read and analyze the Merge Request content, which is user-provided/untrusted third-party code hosted on external repositories and can materially influence the agent's review actions and comments.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

May 6, 2026, 02:32 PM

Issues

1