moq-kit

Warn

Audited by Snyk on Aug 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text can be ingested at runtime via subscribing to a data track (e.g., broadcast.subscribeTrack(name = "chat", ...) then track.objects.collect { obj -> decode(obj.payload) } / for try await object in track.objects { ... JSONDecoder().decode(...) }), where the payload bytes originate from the relay’s received objects.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 12, 2026, 11:16 AM
Issues
1
Security Audit — snyk — moq-kit