skills/happy-technologies-llc/happy-platform-skills/agent-miner/Snyk

agent-miner

Warn

Audited by Snyk on Aug 3, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). In Step 2 of SKILL.md, the runtime workflow queries ServiceNow tables sys_cs_conversation and then sys_cs_message and reads message body/typed_text from Virtual Agent/user conversation transcripts, which originate as outsider-authored free text users submit to the chat system.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 3, 2026, 02:23 PM

Issues

1

Security Audit — snyk — agent-miner