skills/dachent/skills/document-handoff/Snyk

document-handoff

Warn

Audited by Snyk on Aug 16, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). In scripts/phases/synthesize.mjs (rendered via scripts/phases/render-memo.mjs using agentFn), the agent is prompted with extracted session transcript text from scripts/phases/extract-sessions.mjs → lib/providers.mjs (extract*), which originates from user-specified/externally supplied JSONL/Hermes sources discoverable at runtime.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 16, 2026, 07:58 AM

Issues

1

Security Audit — snyk — document-handoff