kelly-creators
Warn
Audited by Snyk on Aug 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads creator engagement/free-text fields (e.g.,
reason,suggested_reply, quality-gategate_checksnotes) from the user’s BusabasecreatorsBase viabusabase-provider.getState()→readAllRecords("creators")→buildSnapshot()and then renders/uses that text in the UI and for decision drafting.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata