spacetimedb-clients
Warn
Audited by Snyk on May 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The docs (references/clients-codegen.md and references/clients.md) explicitly show/generated procedures like conn.procedures.fetchExternalData(url) and state that procedures can perform external HTTP requests, with examples that call such procedures and consume their results—meaning the skill workflow expects the agent to ingest and act on arbitrary third-party URL content.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata