skills/mvanhorn/printing-press-library/pp-steam-web/Snyk

pp-steam-web

Warn

Audited by Snyk on Oct 9, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The workflow ingests user reviews, news feeds, and community content from Steam APIs via the CLI, allowing outsider-authored free text to enter the agent's context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to install an external Go module from GitHub via go install github.com/mvanhorn/printing-press-library/...@latest, constituting an operational dependency with common/reputable unofficial provenance.

Issues (2)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

W012

MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Oct 9, 2026, 05:02 AM

Issues

2