Broken Authentication Testing
Warn
Audited by Snyk on Nov 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The required workflow sends requests to a user-supplied target application and reads its live responses (Phases 1, 3, 6, 7), which is arbitrary web content the agent actively fetches, but the attacker cannot force delivery of that content to the agent.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata