gs-bun-aws-lambda
Warn
Audited by Snyk on Mar 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill directly parses and acts on untrusted external inputs — e.g., API Gateway request bodies in src/functions/create-category.ts (SKILL.md), SQS/SNS message bodies in src/functions/process-queue.ts and the event-source references, and even shows fetching external URLs in the migration reference — so third-party content can be ingested and materially influence execution.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata