session-logs
Warn
Audited by Snyk on Jul 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). SKILL.md describes reading local session transcript files (
~/.clawdbot/agents/<agentId>/sessions/<session-id>.jsonl) to search prior conversations; these are stored conversation history that includes messages authored by other parties (e.g., other users in the chat), which can be ingested as readable text into the agent’s LLM context when the skill is used.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata