deepscan-create-task
Warn
Audited by Snyk on Mar 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's scripts/create_task.py makes a POST to the public API at https://data.cli.im/x-deepscan/api/tasks/init and parses the returned JSON (task_id, task_title, description, etc.) to update local config and drive switching behavior, meaning untrusted third-party response content is ingested and can change subsequent tool actions.
Audit Metadata