gs-bun-aws-lambda

Warn

Audited by Snyk on Mar 29, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill directly parses and acts on untrusted external inputs — e.g., API Gateway request bodies in src/functions/create-category.ts (SKILL.md), SQS/SNS message bodies in src/functions/process-queue.ts and the event-source references, and even shows fetching external URLs in the migration reference — so third-party content can be ingested and materially influence execution.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 29, 2026, 02:17 AM
Issues
1
Security Audit — snyk — gs-bun-aws-lambda