skills/dynobox/skills/dyno-run-debug/Snyk

dyno-run-debug

Warn

Audited by Snyk on Jul 31, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The dyno dyno/fixtures/debug-workdir (via the diagnose-only scenario prompt in dyno/dyno-run-debug.dyno.mjs) ingests user-provided run output as free text (the pasted $ npx dynobox run ... --debug block) for diagnosis, creating an indirect prompt-injection exposure path.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 31, 2026, 04:04 PM

Issues

1

Security Audit — snyk — dyno-run-debug