dflow-market-data
Warn
Audited by Snyk on Jul 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). SKILL.md instructs connecting to DFlow WebSocket streams (
/quote-stream,/book-stream,/priority-fees/stream) and relaying the received message frames into the client (browser/LLM agent) context, where those messages originate from an external third-party service (public DFlow API content).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata