skills/mphinance/alpha-skills/substack-draft-status/Snyk

substack-draft-status

Warn

Audited by Snyk on Jun 18, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.85). The required workflow fetches public/outsider-authored free text from Substack at runtime via fetch_server_drafts() calling GET /api/v1/drafts?limit=20 and then parses fields like title/draft_title into the LLM-visible output.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jun 18, 2026, 02:08 PM

Issues

1

Security Audit — snyk — substack-draft-status