okf-wiki-query

Warn

Audited by Snyk on Aug 23, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). SKILL okf-wiki-query treats the OKF wiki bundle (wiki/) as input and at runtime reads wiki/index.md plus a smallest connected set of local Markdown pages (following links/# Relations) before answering, meaning outsider-authored free text can be ingested if the attacker can submit/poison the bundle contents that workflow reads.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 23, 2026, 12:06 PM
Issues
1