shunk031-herdr-meta-orchestrate

Warn

Audited by Snyk on Oct 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). The required workflow instructs the agent to read agent listings, transcripts, and inbox items from local and remote Herdr orchestrators and saved machines (herdr agent list, herdr machine list --json, herdr pane read), which ingest outsider-authored free text from other running agent sessions and messages without prior selection.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 26, 2026, 03:56 AM
Issues
1