skills/coval-ai/coval-external-skills/huggingface-import/Snyk

huggingface-import

Warn

Audited by Snyk on Sep 23, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (low risk: 0.10). The agent imports datasets from HuggingFace via URLs or repository names provided by the user, ingesting third-party dataset content which constitutes low-risk external free text input.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 23, 2026, 05:24 PM

Issues

1