skills/huggingface/skills/hf-cloud-serving-image-selection/Snyk

hf-cloud-serving-image-selection

Warn

Audited by Snyk on Sep 10, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (low risk: 0.10). The workflow instructs the agent to fetch documentation and model configuration files from external web/API sources like GitHub and HuggingFace, but these are specific user-driven or developer-selected lookups rather than a monitored feed of outsider-authored submissions.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 10, 2026, 07:27 PM

Issues

1

Security Audit — snyk — hf-cloud-serving-image-selection