semantius-modeler
Warn
Audited by Snyk on Aug 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In
semantius-modelerStage 1/Step 1 runtime, the agent reads the user-provided*-semantic-spec.mdfile produced bysemantius-analyst(“Locate the*-semantic-spec.mdfile”), then parses multiple free-text fields (descriptions, JsonLogicmessage/description, enum labels, andSelect rule/Validation rulesobjects) from that file into the model and uses them to execute Semantius writes via Stage 4.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata