ha-api
Warn
Audited by Snyk on Sep 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The skill provides instructions and examples for interacting with the Home Assistant REST and WebSocket APIs, which can ingest arbitrary entity states, service responses, and event data originating from external devices or users connected to the Home Assistant instance.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata