wp-maps

Warn

Audited by Snyk on Apr 29, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The skill’s SKILL.md instructs the agent to use the Membrane CLI to connect to WP Maps on external WordPress sites and run actions that return map/marker data (see "Connecting to WP Maps" and "Running actions"), so the agent will ingest and act on potentially untrusted, user-generated content from third‑party websites.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 29, 2026, 05:39 AM
Issues
1
Security Audit — snyk — wp-maps