crucix-intelligence-dashboard
Warn
Audited by Snyk on Sep 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The Crucix intelligence dashboard consumes external feeds and chats (such as GDELT news, RSS feeds, and Telegram channels) that ingest outsider-authored free text into LLM analysis paths.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The skill instructs cloning an arbitrary GitHub repository (
https://github.com/calesthio/Crucix.git) and installing/running its code, which is an unverifiable runtime external dependency with weak/unknown publisher provenance.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata