hatch-pet
Warn
Audited by Snyk on Aug 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text is ingested at runtime as the user’s concept/notes to create prompt text that is then fed into
$imagegenfor the base and row jobs (viaprepare_pet_run.pygeneratingprompts/base-pet.mdandscripts/prepare_pet_run.py’srow_prompt()content).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata