c-messaging
Warn
Audited by Snyk on Mar 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md explicitly reads and processes user-generated messages from iMessage and WhatsApp (e.g.,
imsg read,imsg unread,wacli read,wacli unread), so it ingests untrusted third-party content that could contain instructions influencing agent actions.
Audit Metadata