fiverr-research
Warn
Audited by Snyk on Oct 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The skill searches and retrieves public Fiverr gigs and seller profiles via the Crawlora API, exposing the agent to untrusted freelance marketplace content (gig descriptions, user reviews, and seller bios).
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (medium risk: 0.30). The skill makes runtime API requests to the third-party service at api.crawlora.net, which constitutes an operational dependency with common/reputable unofficial provenance.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata