find-skills
Warn
Audited by Snyk on Aug 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The skill “find-skills” only instructs users to run the Skills CLI (e.g.,
npx skills find) and browse a provider page on skills.sh for skill discovery, but the required runtime workflow for this skill does not specify ingesting outsider-authored free text into an LLM without first selecting a specific item.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata