skills/megastep/codex-skills/axiom-asc-mcp/Snyk

axiom-asc-mcp

Warn

Audited by Snyk on Oct 15, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The workflow reads untrusted App Store reviews via reviews_list, which allows outsiders to submit free text into a monitored feed.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

Potentially malicious external URL detected (high risk: 0.70). The skill references GitHub-hosted Mint package installation via 'zelentsov-dev/asc-mcp@1.4.0', constituting an external operational dependency with unofficial provenance.

Issues (2)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

W012

MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Oct 15, 2026, 12:41 AM

Issues

2