github-social-preview
Warn
Audited by Snyk on Jul 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). SKILL.md:56-68 describes using the
WebFetchtool to fetch outsider-authored README/description/topics from arbitrary GitHub repo pages/RAW URLs at runtime, and those fetched free-text fields are then used as LLM-visible inputs for deriving display content (subtitle/tags) and passed into the generator.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata