vmanomaly-config
Warn
Audited by Snyk on Jul 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). The required runtime workflow includes making live HTTP requests to an attacker-influenced/outsider-controlled URL endpoint (via
VM_ANOMALY_URL) and then piping the returned response body (arbitrary prose/JSON) into the agent context through| jq .(e.g.,/api/v1/models,/api/v1/model/schema,/api/v1/timeseries/characteristics, and/api/v1/compatibility).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata