dependency-audit
Warn
Audited by Snyk on Apr 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's required workflow runs CLI tools and queries public package registries and vulnerability databases (e.g., npm audit / npm view, pip-audit, cargo audit, govulncheck, Snyk) and instructs parsing their JSON/output as part of the audit, meaning it ingests untrusted, user-published package/advisory data that can influence subsequent actions (CI failures, automerges, remediation decisions).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata