pp-wikipedia
Warn
Audited by Snyk on Sep 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The skill reads Wikipedia article summaries and content via the Wikipedia REST API, which constitutes fetching public web content where anyone can publish articles (low indirect prompt injection risk).
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (medium risk: 0.30). The skill instructs installation of external binaries via
npxfrom npm andgo installfrom GitHub (github.com/mvanhorn/...), constituting a third-party/unofficial runtime operational dependency.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata