hf-download
Warn
Audited by Snyk on Aug 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). SKILL.md describes a HuggingFace download helper (
download_file()/download_folder()) that fetches files/models by caller-specifiedrepo_idandfilename/allow_patterns, but does not indicate that the runtime ingests arbitrary outsider-authored free text from a feed/queue or monitors any user-submitted text source.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata