skills/l3-igrant/skills/igrantio-business-wallet-portal/Snyk

igrantio-business-wallet-portal

Warn

Audited by Snyk on Aug 19, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). Skill.md describes wiring the portal “live inbox” via SSE stream in igrantio-holder-notifications (step 4), which at runtime ingests outsider-authored notification/free-text messages into the agent workflow without requiring a specific item selection step first.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 19, 2026, 03:57 PM

Issues

1

Security Audit — snyk — igrantio-business-wallet-portal