agent-signal
Warn
Audited by Snyk on Aug 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Agent Signal ingests an external “source” event via its runtime/queue-driven workflow (e.g.,
enqueueAgentSignalSourceEvent(...)→AgentSignalWorkflow→runAgentSignalWorkflow), meaning an outsider who can submit events into the monitored queue/feed can supply free-text payloads that downstream handlers may consume.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata