phase-gaps
Warn
Audited by Snyk on Apr 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). SKILL.md explicitly requires running /skill-oracle and the
find-skillscheck against the ClawHub registry (a public third‑party skill registry) and then uses those discovered registry entries to decide available/missing skills and install/fallback actions, so untrusted external registry content can be read and materially influence the agent's decisions and tool use.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata