agent-status
Warn
Audited by Snyk on Aug 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In scripts/update_status.py, the CLI takes outsider-provided free text arguments (e.g., --goal, --question, --label, --next-action, --not-proven, --do-not-do-next, --reason, --blocker) and writes them into status.json/STATUS.html via persist() and render_html(), exposing that text to the runtime HTML/JS that reflects the artifacts (including auto-refresh of status.json).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata