subdomain-enumeration
Warn
Audited by Snyk on Jul 31, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The skill runtime path fetches outsider-authored free text from crt.sh via
curl "https://crt.sh/?q=%25.$DOMAIN&output=json"and then parsesname_valuefields from that JSON into the subdomain list (jq ... > .../crtsh.txt), which is subsequently consumed by downstream probing commands.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata