implement-prepare-environment-script

Warn

Audited by Snyk on May 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The skill's prepare scripts explicitly run package-install/build commands that fetch code from public package registries (e.g., "pip install -r requirements.txt" in assets/prepare_environment_python.sh and "mvn clean install" in assets/prepare_environment_java.sh), which pulls untrusted, user-published third‑party content into the runtime that can materially affect subsequent build/test behavior.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 16, 2026, 08:40 AM
Issues
1
Security Audit — snyk — implement-prepare-environment-script