skills/character-ai/larch/issue/Snyk

issue

Warn

Audited by Snyk on Sep 15, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The skill reads GitHub issue bodies and comments via issue list-issues and issue fetch-issue-details, allowing outsiders to submit arbitrary free text that is subsequently ingested by the agent's deduplication and dependency analysis workflow.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 15, 2026, 04:37 PM

Issues

1