magic-data-synthesis

Warn

Audited by Snyk on Jul 14, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.65). The required runtime path for this skill is the LLM prompt construction in scripts/batch_synthesize.py (build_prompt_for_row()), which injects per-row free-text from the input dataset (seed columns and other context columns) into the LLM prompt; if that dataset/columns originate from outsiders, this becomes an indirect prompt-injection channel.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 14, 2026, 11:49 AM
Issues
1
Security Audit — snyk — magic-data-synthesis