skills/mabzadev/skills/wizard/Snyk

wizard

Warn

Audited by Snyk on Aug 20, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (low risk: 0.10). template.sh (generated by the wizard skill) only opens a fixed, first-party-specified URL and captures human-provided inputs via ask/ask_secret into env/secrets, but it does not ingest any outsider-authored free text from an externally writable feed/queue at runtime.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 20, 2026, 11:24 AM

Issues

1