bootstrap-example
Warn
Audited by Snyk on May 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). This skill explicitly shallow-clones or reads from the public GitHub repo (DEFAULT_REPO_URL = "https://github.com/luxonis/oak-examples.git" referenced in scripts/bootstrap_from_example.py and SKILL.md step 2) and requires the agent to read INDEX.md and example AGENTS.md files to select and bootstrap projects, so untrusted third-party content from those pages can influence selection and subsequent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata