session-viewer
Warn
Audited by Snyk on Aug 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In
skills/session-viewer/scripts/session-viewer.ts, the runtime reads a user-supplied<session.jsonl>file (fs.readFile), parses its JSONL text (parseJsonl→parseSessionDocument), and embeds the resulting session text into the generated HTML (buildSessionViewerHtml), so outsider-authored transcript text is ingested.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata