astro-db

Warn

Audited by Snyk on Apr 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The mandatory Agent Workflow in SKILL.md requires spawning agents such as "mcp__context7__query-docs" to "Check Astro 6 DB docs" (public third‑party documentation) and "fuse-ai-pilot:research-expert" to verify the Astro DB API, which clearly instructs the agent to fetch and interpret external public docs that can influence implementation and tool use.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 3, 2026, 10:59 AM
Issues
1
Security Audit — snyk — astro-db