create-batch
Warn
Audited by Snyk on May 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's workflow and scripts explicitly fetch data from the Bolna API (e.g., GET https://api.bolna.ai/batches/{batch_id} and GET /batches/{batch_id}/executions) and the SKILL.md calls out per-call "transcript" and "extracted data" from executions, which are user-generated third-party content the agent is expected to read and could influence subsequent behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata