spacetimedb-reducers
Warn
Audited by Snyk on May 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's "Scheduling Procedures" examples (references/functions-reducers.md and SKILL.md) show inserting user-provided URLs into a schedule table (fetch_schedule) and a procedure (fetch_external_data / ctx.http.get or ctx.http.fetch) that fetches and processes those arbitrary URLs, exposing the agent to untrusted third-party content.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata