sequenzy-email-marketing
Fail
Audited by Snyk on Aug 5, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 1.00). One URL (https://example.com/template.zip) is a direct .zip download hosted on a generic/untrusted domain (a common malware distribution vector); the others are either official Sequenzy domains or webhook example endpoints shown in docs and are not downloads.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The required runtime workflow includes reading user inbox conversation message history via
sequenzy inbox list/sequenzy inbox get(and then acting on it withreply/mark-read), so outsider-authored free text can be ingested from subscriber/customer messages that arrive into the inbox.
Issues (2)
E005
CRITICALSuspicious download URL detected in skill instructions.
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata