skills/shbernal/rfc-ai-tooling/rfc-lookup/Snyk

rfc-lookup

Warn

Audited by Snyk on Aug 5, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). In scripts/rfc.py, the required runtime can read outsider-authored RFC free text from the online HTTPS fetch path (ensure_index() fetching INDEX_URL, and read_document() fetching RFC_URL) and then returns sections/content derived from that text.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 5, 2026, 03:32 PM

Issues

1