book-research
Warn
Audited by Snyk on Aug 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). SKILL.md and reference/endpoints.md describe runtime calls to Crawlora’s Goodreads/Apple Books endpoints using user-supplied search terms and reviews (e.g., /goodreads/search q, /goodreads/book/{id}/reviews and /apple-books/*/reviews), so outsider-authored free text can be ingested via search and then returned as part of review text.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata