saturnswap-analytics
Warn
Audited by Snyk on Mar 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's runtime scripts (scripts/platform-stats.js and scripts/top-pools.js) call getTotalStats/getPoolStats from scripts/saturnswap-client.js to fetch live data from the public SaturnSwap API (external, potentially user-produced token/pool metadata) and directly use those values to rank and report pools, so untrusted third‑party content can influence agent outputs.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata