iblai-agent-history
Warn
Audited by Snyk on Jun 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). The skill reads “chat-history” and “memory” via the iblai API endpoints (
/dm/api/ai-analytics/.../chat-history/and/dm/api/ai-mentor/.../memory/{conversationId}/), which contain other users’ conversation text (outsider-authored free-form messages) that is ingested into the agent’s LLM context when the tool output is used for summarization/reporting.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata