debug-pdf
Warn
Audited by Snyk on Mar 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's CLI workflows (e.g., "analyze " and "./run.sh batch failed_urls.txt" in SKILL.md) download and parse arbitrary public PDF URLs using httpx and a sibling "fetcher" (Playwright) and then use the parsed content to drive pattern detection, fixture generation, notifications (--send-inbox), and regression/test actions, so untrusted third‑party PDF content can materially influence the agent's decisions and tool use.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata