max-effort
Warn
Audited by Snyk on Aug 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). This skill’s workflow only mentions verifying “cited file,” “open the URL,” and “run the tests/build/repro” as task-specific steps, without specifying any runtime ingestion from an external outsider-authored source feed/queue that an attacker can submit to directly.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata