skills/impertio-studio/axum-claude-skill-package/axum-impl-auth-jwt/Snyk

axum-impl-auth-jwt

Warn

Audited by Snyk on Aug 13, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). At runtime the Axum Claims extractor (FromRequestParts) directly ingests outsider-authored request free text from the Authorization: Bearer ... header via parts.extract::<TypedHeader<Authorization<Bearer>>>() and then decode::<Claims>(bearer.token(), ...), meaning an outsider can submit arbitrary token strings to be parsed/validated.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 13, 2026, 03:33 AM

Issues

1

Security Audit — snyk — axum-impl-auth-jwt