dora

Warn

Audited by Snyk on May 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 1.00). The skill's required verification-loop and several workflow steps explicitly instruct checking and "verifying the current version" of RTS/ITS and regulatory texts, and the References list public ESAs/DNB/eur-lex URLs (e.g., "verify current version via the ESAs website" and the listed links), which requires fetching and interpreting open/public third‑party web content that can materially influence decisions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 18, 2026, 04:30 PM
Issues
1
Security Audit — snyk — dora