capability-evolver
Warn
Audited by Snyk on Aug 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Evolver’s required runtime workflow uses a local Proxy mailbox, but it polls/receives Hub-provided inbound messages like
task_available/asset_submit_resultvia{PROXY_URL}/mailbox/poll, which is outsider-authored free text delivered through the task/message queue mechanism.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata