narrative-extractor
Warn
Audited by Snyk on Mar 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill explicitly ingests "raw HTML from CCLD inspection reports" (see Input and "When to Use") and its Extraction Strategy requires parsing narrative content from those public inspection web pages, so untrusted third‑party text is read and used to drive extraction and downstream analysis.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata