pipa-dependency-handoff
Warn
Audited by Snyk on Aug 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). SKILL.md defines a read-only dependency/handoff workflow that only reads tool-discovered, specifically selected live sources (via composio-mcp discovery with selected-tool schemas) rather than ingesting arbitrary outsider-authored free text without first selecting concrete items.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata