image-generation-via-a2a
Warn
Audited by Snyk on Jul 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.65). The required workflow delegates to the Images app via A2A and then returns the Images agent’s reply “verbatim” into the slides agent’s
callAgentreturn value, which is then parsed as plain text—this is outsider-authored free text from another app’s agent at runtime.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata