mthds-share
Warn
Audited by Snyk on Mar 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill requires running the mthds-agent CLI against a public GitHub address (the required [address] "org/repo" in Step 2) and then parses the CLI's JSON output (Step 3) to produce and act on share URLs derived from that repository's content, which is untrusted, user-generated third-party content that can influence subsequent actions (opening browser tabs) per the mandatory workflow steps.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata