rhdh-local
Warn
Audited by Snyk on Aug 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In the
workflows/enable-plugin.mdrequired reading path, the skill runsscripts/fetch-plugin-metadata.pyto fetch plugin YAML and per-package metadata from GitHub (API/RAW URLs) based on user-selected plugin names, so untrusted provider content can be ingested as free-form text at runtime.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill's runtime script scripts/fetch-plugin-metadata.py performs live HTTP fetches from the GitHub API and raw content (e.g. https://api.github.com/repos/redhat-developer/rhdh-plugin-export-overlays/contents/catalog-entities/extensions/plugins and https://raw.githubusercontent.com/redhat-developer/rhdh-plugin-export-overlays/main) to load plugin YAML/metadata that the CLI uses at runtime to determine package references and outputs, so external content directly influences the agent's behavior.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata