strapi
Warn
Audited by Snyk on Apr 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's required "IMPORTANT: Discovery Workflow" instructs the agent to fetch and parse content types and entries from an arbitrary Strapi instance (via STRAPI_BASE_URL, e.g. GET $STRAPI_BASE_URL/api/content-type-builder/content-types and /api/PLURAL_API_ID), which are untrusted/user-generated third‑party web content that the agent must interpret and that can materially change subsequent API actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata