hunt-websocket

Warn

Audited by Snyk on Nov 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). The required workflow enumerates live frames from the user-supplied target's WebSocket endpoints (via Burp WebSocket history) and reads received messages, which may include content from other users, but the agent only reaches that content after choosing to browse or connect to a specific target, so outsiders cannot force delivery.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 12, 2026, 05:47 PM
Issues
1