social-fetch
Warn
Audited by Snyk on Aug 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). /social-fetch takes a user-supplied post URL, infers the platform, and then fetches/reads the post’s free-form text from that external source (e.g., Reddit
.jsonand HN Algolia comments, and agent-browser previews/scrapes for other platforms), meaning outsider-authored content is ingested at runtime.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata