hunt-websocket
Warn
Audited by Snyk on Nov 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The required workflow enumerates live frames from the user-supplied target's WebSocket endpoints (via Burp WebSocket history) and reads received messages, which may include content from other users, but the agent only reaches that content after choosing to browse or connect to a specific target, so outsiders cannot force delivery.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata