sync-models
Warn
Audited by Snyk on Jul 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). SKILL.md’s required workflow uses runtime web fetching (e.g.,
WebFetch https://router.huggingface.co/v1/modelsandcurl ... /v1/models), and later step 4/5 explicitly instructs searching provider docs via WebFetch/WebSearch—so outsider-authored free-text from public web pages (router response + model/provider documentation) can be ingested for decision-making.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata