ena-database
Warn
Audited by Snyk on May 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill programmatically fetches and parses data from public ENA endpoints (e.g., the Portal API, Browser API, Taxonomy REST and Cross-Ref services) and uses fields like study_title, sample metadata, accession lists and file-report URLs to drive selections and follow-up requests/downloads, so untrusted user-submitted content could indirectly influence agent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata