bat-adhoc
Warn
Audited by Snyk on Aug 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). SKILL.md describes a runner (
/bat-adhoc→python tests/uat/run_uat.py) that accepts outsider-provided scenario text/arguments and pipes it into the agent prompts (setup/test/teardown), meaning free text authored by a user can be ingested at runtime.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata