skills/reason-machines/ai-agent-skills/burner-agents-privacy/Snyk

burner-agents-privacy

Warn

Audited by Snyk on Oct 8, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (low risk: 0.10). The skill involves agents browsing arbitrary web pages and fetching external content live, which represents low risk for indirect prompt injection.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

Potentially malicious external URL detected (high risk: 0.70). The skill references an unofficial third-party GitHub repository (https://github.com/NotPBShaw/burner-agents.git) and an unofficial PyPI package for installation, representing a weak/unknown provenance operational dependency.

Issues (2)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

W012

MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Oct 8, 2026, 11:38 PM

Issues

2