skills/drolu/agent-skills/rterm-discovery/Snyk

rterm-discovery

Warn

Audited by Snyk on Jul 31, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The runtime workflow shown in scripts/rterm-discovery.mjs dispatches a discovery task using a free-text instruction sent to agent:startTask and then ingests returned ui.messages (assistant text) from the gateway, meaning outsider-controlled text could be included in the agent/task I/O.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 31, 2026, 07:20 PM

Issues

1

Security Audit — snyk — rterm-discovery