tanstack-db-core-custom-adapter
Warn
Audited by Snyk on Aug 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The runtime workflow shown is a custom adapter pattern that ingests untrusted free-text/data from an outsider-accessible backend via
myWebSocket.subscribe(config.endpoint, ...)andfetch(config.endpoint)(and buffers/replays those events), so attacker-submitted payloads can reach the LLM if it processes the receivedevent.data/JSON items.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata