dotnet
Warn
Audited by Snyk on Jul 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The A2A protocol skill’s runtime path reads free text from externally supplied task messages (e.g.,
taskRequest.Messages...Text) that an outsider can inject by submitting an A2A task to the server.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata