add-deltachat

Warn

Audited by Snyk on Aug 19, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). SKILL’s required workflow wires DeltaChat DM/group messages via the DeltaChat adapter (messages delivered over email/IMAP) and those inbound messages are the outsider-authored free text the agent is meant to respond to.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs modifying service unit files ("add Environment= lines to the systemd service unit or your launchd plist") and restarting systemd/launchd, which involves changing host service configuration and can alter the machine state.

Issues (2)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 19, 2026, 07:37 AM
Issues
2
Security Audit — snyk — add-deltachat