skills/sprngr/rubber-duck/duck-tape/Snyk

duck-tape

Warn

Audited by Snyk on Aug 18, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). In SKILL.md’s /duck-tape resume Angle B recovery, the workflow reads the user-generated session transcript path from .duck-tape/.last-compact and then ingests the transcript content by running hooks/extract-raw.sh/hooks/extract-raw.ps1 to synthesize and write -recovered.state.md.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 18, 2026, 03:17 PM

Issues

1

Security Audit — snyk — duck-tape