brand-asset-sourcing
Warn
Audited by Snyk on Oct 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to query GitHub repositories (
Jxck-S/soaring-symbols,Jxck-S/airline-logos) and download brand asset files via the GitHub contents API and search/fetch operations.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata