skills/nicepkg/ai-workflow/tapestry/Snyk

tapestry

Warn

Audited by Snyk on Sep 25, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (low risk: 0.10). The agent skill extracts content from user-selected URLs (YouTube videos, articles, and PDFs), which represents user-initiated fetching of external web content rather than monitoring an unselected, outsider-submitted feed.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 25, 2026, 08:04 AM

Issues

1