skills/grahama1970/agent-skills/casting-agent/Snyk

casting-agent

Warn

Audited by Snyk on Aug 26, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The casting-agent runtime planner (scripts/casting_agent.py in plan/plan-package) ingests outsider-authored free text via the --context CLI option and embeds it into casting_contract.json/contact_sheet_work_order.json, which is then consumed by downstream subskills.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 26, 2026, 06:03 PM

Issues

1

Security Audit — snyk — casting-agent