pricing-tracker
Warn
Audited by Snyk on Aug 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The pricing-tracker workflow ingests free text by scraping a user-provided (or user-influenced searched) vendor pricing page (e.g., via
urlslikehttps://openai.com/api/pricing) usingonly-main-content, so outsider-authored page text can be read at runtime.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata