skills/steipete/clawdis/wacli/Snyk

wacli

Warn

Audited by Snyk on May 18, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs using wacli commands like "wacli sync --follow", "wacli messages search", and "wacli history backfill" to ingest and read WhatsApp chats/messages—untrusted, user-generated third-party content that the agent would parse and which could carry instructions influencing its behavior.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

May 18, 2026, 05:06 AM

Issues

1

Security Audit — snyk — wacli