discord-admin-bot

Warn

Audited by Snyk on Jun 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). The skill’s “read last 20 messages” runtime path calls Discord’s REST API (GET /channels/{channel_id}/messages?limit=N) and then prints/feeds the returned content/embeds text into the agent context, which is outsider-authored message body text from other Discord users.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 18, 2026, 02:08 PM
Issues
1
Security Audit — snyk — discord-admin-bot