skills/varnan-tech/opendirectory/npm-downloads-to-leads/Snyk

npm-downloads-to-leads

Warn

Audited by Snyk on Oct 24, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The workflow reads external GitHub user profiles and repository/package metadata from GitHub and the npm registry, which contain outsider-authored text such as user bios and descriptions.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Oct 24, 2026, 07:03 PM

Issues

1