download-attachment
Warn
Audited by Snyk on May 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). Yes — the skill explicitly downloads content from arbitrary HTTP/HTTPS URLs provided by users (Step 2: wget/curl) and then analyzes that content (Step 4: pdftotext and Gemini Vision) to generate filenames and drive subsequent actions, so untrusted third‑party content can influence agent behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata