skills/imsuperseller/superseller/whatsapp-waha/Snyk

whatsapp-waha

Warn

Audited by Snyk on May 18, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.90). The skill ingests arbitrary user-generated WhatsApp content (lead form submissions and incoming messages) via WAHA endpoints and the ClaudeClaw webhook (/api/whatsapp/claude/superseller and apps/web/.../api/leads/landing-page/route.ts) and passes that content to agent processing, so untrusted third‑party text can influence tool use and decisions.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

May 18, 2026, 05:37 AM

Issues

1