hono-api
Warn
Audited by Snyk on Apr 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's routes parse and fetch user-provided URLs (see "Route Modules" and the "SSRF Prevention" section with isPrivateHost), which clearly ingests untrusted public third-party content as part of runtime behavior and could therefore enable indirect prompt-injection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata