etsi-spec
Warn
Audited by Snyk on Jun 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). The required workflow fetches outsider-authored free text from public ETSI web pages at runtime (HTML directory listings via
requests.get(base_url)/requests.get(directory_url)and parses them with BeautifulSoup), and also downloads outsider-authored PDFs from ETSI and extracts text (requests.get(pdf_url)thenfirst_page.extract_text()), which is then placed into the agent’s context via printed output.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata