sales-membervault

Warn

Audited by Snyk on Jul 19, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). SKILL.md instructs the agent to read references/learnings.md and references/platform-guide.md (and references/membervault-api-reference.md) at runtime, which are outsider-authored reference documents (not the operating user’s own content), so their free-text is ingested into the LLM context.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 19, 2026, 04:16 PM
Issues
1
Security Audit — snyk — sales-membervault