rnd-cli
Warn
Audited by Snyk on Apr 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill explicitly runs the
rndCLI to query the public React Native Directory (https://reactnative.directory) and related GitHub repos (e.g.,github_urlfields mentioned in SKILL.md) and instructs the agent to read and act on those live third‑party package metadata and repo contents (viarnd info,rnd alternatives,rnd analyze, etc.), so untrusted public content can materially influence tooling decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata