skills/posthog/ai-plugin/signals-scout-session-replay/Snyk

signals-scout-session-replay

Warn

Audited by Snyk on Sep 10, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The required workflow for this PostHog session replay scout agent ingests user browser data (URLs, element text, console messages, AI summaries, and scanner outputs) via SQL event queries and session tools, which constitutes an outsider-submitted free text ingestion vector.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 10, 2026, 03:59 PM

Issues

1

Security Audit — snyk — signals-scout-session-replay