apk-redteam-pipeline
Warn
Audited by Snyk on Nov 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The required workflow ingests outsider-authored content when it searches and fetches third-party APK marketplaces (APKPure and APKMirror search results) and downloads the APK binaries they host, which the agent must actively request, so an attacker can publish poisoned listings but cannot force delivery.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata