barcode-lookup
Warn
Audited by Snyk on Apr 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). This skill instructs the agent to connect to the public Barcode Lookup service via the Membrane connector ("Connecting to Barcode Lookup" / "Running actions" in SKILL.md) and to read the action "output" values, meaning untrusted third‑party product data from the open web is fetched and can influence subsequent decisions or tool use.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata