skills/lukasa1993/tanstack-skills-extracted/tanstack-ai-core-chat-experience/Snyk

tanstack-ai-core-chat-experience

Warn

Audited by Snyk on Aug 10, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The runtime workflow ingests outsider-authored free text via the /api/chat POST body (const { messages } = body / messages passed into chat(...)), so an external user can supply arbitrary chat content that the LLM will process.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 10, 2026, 06:37 AM

Issues

1