iam-review
Warn
Audited by Snyk on Aug 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). SKILL.md’s required runtime flow inventories and reviews “IAM policies, role definitions, user provisioning workflows,” and it explicitly treats analyzed IAM configuration data as untrusted input (via target-file/directory arguments), meaning outsider-authored text can be ingested from IAM configuration artifacts selected by the user.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata