cline-sdk
Warn
Audited by Snyk on May 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill exposes the agent to arbitrary public web and event content via ClineCore's built-in "fetch_web_content" web tool and related plugin/automation hooks (see references/clinecore/REFERENCE.md and references/tools/REFERENCE.md and plugins/REFERENCE.md), which the agent is expected to read and can materially influence subsequent tool use and decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata