gestao-clientes
Warn
Audited by Snyk on Apr 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's bulk_import_clients operation in resources/client-management.yaml accepts a csv_file_url ("URL ou caminho do arquivo CSV"), implying the agent will fetch and ingest CSVs from arbitrary URLs which could be untrusted third‑party content and directly drive import actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata