detecting-debug-endpoints
Warn
Audited by Snyk on Aug 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). In
scripts/probe_debug.py, the required runtime probes attacker-influenceable targets by making HTTP GET requests toargs.urlplus a (mostly fixed) set of probe paths, then ingests the resulting response bodies (resp.text/resp.content) for fingerprint matching, but it does not ingest outsider-authored text via an in-scope submission queue/feed or documentation source.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata