skills/microsoft/aspire/dependency-update/Snyk

dependency-update

Warn

Audited by Snyk on Oct 7, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (low risk: 0.10). The skill queries nuget.org for package versions and searches for package metadata/changelogs on the web/GitHub, which represent outsider-authored/public registry content fetched at runtime.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Oct 7, 2026, 01:25 AM

Issues

1