strava
Warn
Audited by Snyk on Oct 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The Strava skill ingests user workout data, including activity descriptions, which can originate from other athletes or shared content within clubs or activities, presenting an indirect prompt injection risk via third-party content in API responses.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata