moq-kit
Warn
Audited by Snyk on Aug 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text can be ingested at runtime via subscribing to a data track (e.g.,
broadcast.subscribeTrack(name = "chat", ...)thentrack.objects.collect { obj -> decode(obj.payload) }/for try await object in track.objects { ... JSONDecoder().decode(...) }), where the payload bytes originate from the relay’s received objects.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata