reddit-creator-deploy

Warn

Audited by Snyk on Jul 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.75). At runtime, the required workflow ingests outsider-authored free text via the --roster and --subs input files (e.g., kol_roster.json from reddit-kol-finder and subs_fit.json from subreddit-deep-research), which are then read as JSON and rendered into LLM-readable prose in deployment_matrix.md and persona_cards.md (e.g., scripts/generate.py lines 29-47 and 56-69 feed into string templates at lines 126-150).

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 18, 2026, 05:04 AM
Issues
1
Security Audit — snyk — reddit-creator-deploy