blocked-page-recovery

Warn

Audited by Snyk on Aug 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text can be ingested at runtime because the script takes a user-supplied URL, then fetches and reads the resulting HTML/JSON bodies from third-party services (e.g., https://archive.org/wayback/available?url=... and https://web.archive.org/web/2/..., plus https://{archive.ph,archive.md,archive.li,archive.is}/newest/...), which can contain attacker-controlled content if the attacker authors the archived pages.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 13, 2026, 06:01 PM
Issues
1
Security Audit — snyk — blocked-page-recovery