encode-skill
Warn
Audited by Snyk on Jun 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). The required workflow calls
scripts/rest_request.py, which performs a runtime HTTP GET/POST tobase_url+path(e.g.,https://www.encodeproject.org/...) and then ingests the fetched response body viaresponse.json()/response.textinto the returnedrecords/summary(LLM context), so any free-form text contained in that outsider-hosted response can be included.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata