building-sf-integrations
Warn
Audited by Snyk on May 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly requires ingesting external OpenAPI specs and WSDLs (see "External Service registration from OpenAPI specs" in SKILL.md and the assets/soap/wsdl2apex-guide.md / assets/external-services/* guides), meaning it fetches and parses arbitrary third-party API schema documents which the agent is expected to read and use to generate code/decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata