spiral-html
Warn
Audited by Snyk on May 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's workflow explicitly instructs the agent to run per-dependency "Detect-new" commands and to "Read the upstream CHANGELOG / release notes" (see docs/DEPENDENCY_LEDGER.html and docs/IMPLEMENTATION_PLAN.html, and the Dependency Upgrade Gate in AGENTS.md), which requires fetching and interpreting arbitrary public third-party pages (npm/GitHub releases) and using that content to decide upgrades and code changes, exposing the agent to untrusted user-authored web content that could carry indirect prompt-injection instructions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata