skills/mr-kelly/skills/kelly-tickets/Snyk

kelly-tickets

Warn

Audited by Snyk on Aug 25, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). In the kelly-tickets AirApp, the agent runtime ingests outsider-authored “complaint text” from the Busabase-backed intake Base (including the text field) via busabase-provider.js → getState() → buildSnapshot, then shows it in the LLM-facing triage/classification workflow.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 25, 2026, 10:38 AM

Issues

1

Security Audit — snyk — kelly-tickets