gemini-hardened
Warn
Audited by Snyk on Apr 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill expressly supports installing/enabling third‑party "gemini extensions" (see SKILL.md and the Extension Installation Safety section in SAFETY.md), which are untrusted external code fetched and executed by the CLI and thus can provide instructions that materially influence the agent's behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata