mercado-libre
Warn
Audited by Snyk on May 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). This skill instructs the agent to connect to Mercado Libre via the Membrane CLI and to run/list actions (e.g., "membrane action list/run --connectionId=CONNECTION_ID") which will fetch user-generated marketplace records and other public Mercado Libre content that the agent is expected to read and act on, exposing it to untrusted third-party content that could contain indirect prompt injections.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata