skills/ciciliaeth/claude-skills/ai-security/Snyk

ai-security

Warn

Audited by Snyk on Aug 21, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). In scripts/ai_threat_scanner.py, runtime scanning of free-text prompts from --test-file (JSON array of strings or objects with a prompt key) ingests outsider-authored text into scan_prompts() via re.search without requiring prior selection of a specific item.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 21, 2026, 05:07 AM

Issues

1

Security Audit — snyk — ai-security