abap-cloud
Warn
Audited by Snyk on May 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's required "Released API Discovery" guidance explicitly instructs the agent to browse public third‑party pages (e.g., the Cloudification API Viewer at https://sap.github.io/abap-atc-cr-cv-s4hc/ and other GitHub/help.sap.com links), meaning the agent would fetch and interpret untrusted external web content that can materially influence its decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata