zalando-research
Warn
Audited by Snyk on Aug 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). Zalando research’s REQUIRED runtime workflow ingests outsider-authored free text only as user-provided query strings (e.g.,
/zalando/search q=...and/zalando/suggest q=...) that the skill sends to the Crawlora API but does not read from an outside feed/queue without selecting a specific item.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata