skill-doctor
Warn
Audited by Snyk on Oct 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The workflow reads local chat history files, agent conversation databases, and agent transcripts from various harnesses (Warp, Claude Code, Codex, Pi, Grok Build, ZCode), which contain user prompts and agent interaction history.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata