session-profiler
Warn
Audited by Snyk on Aug 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text is read from Hermes transcript JSONL files (user_message message text and assistant content blocks, plus tool inputs/outputs) when the required runtime workflow parses a session via
sp parse, which loads and sanitizes those message strings into events.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata