api-proposal
Warn
Audited by Snyk on May 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's required workflow explicitly instructs the agent to read and interpret external, user-generated content—e.g., full GitHub issues (Phase 0/Phase 1) and public searches on grep.app and apisof.net—which are untrusted third‑party sources and are used to drive prototype, design, and publishing decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata