nimble-web-expert

Warn

Audited by Snyk on Apr 21, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and ingests live content from arbitrary public URLs and social/social-network agents (see SKILL.md commands like nimble extract, nimble search, nimble map, nimble crawl and the agent table in references/nimble-agents/SKILL.md), and that untrusted third‑party content is parsed and used to decide follow-up actions (browser-actions, network-capture, parser schemas) as part of the core workflow, enabling indirect prompt-injection risk.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 21, 2026, 06:36 PM
Issues
1