line
Warn
Audited by Snyk on Apr 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). This skill instructs the agent to receive and act on webhook events and to fetch user-generated data from the LINE Messaging API (e.g., webhook events, /v2/bot/profile/USER_ID, /v2/bot/followers/ids) — untrusted third-party messages and profiles are explicitly read and used in the workflow, which could carry instructions that influence the agent's actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata