redirect-trace

Warn

Audited by Snyk on Jul 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.75). The required workflow calls seo_run_report/seo_describe_report for redirect-trace with a user-supplied url, and the report’s runtime output (e.g., fetched redirect responses, headers like Location, and extracted finalPage/metaRobots/canonical evidence) is then read into the agent context—this is effectively public web content fetched at runtime and can include outsider-authored free text.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 11, 2026, 04:35 PM
Issues
1
Security Audit — snyk — redirect-trace