skills/wubin1836/ai-hive-agent-skills/background-replace/Snyk

background-replace

Warn

Audited by Snyk on Aug 12, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The runtime workflow ingests outsider-authored free text from the CLI argument --prompt (and optionally --system) and forwards it as messages[].content to POST .../openapi/v1/chat/text or POST .../openapi/v1/generation/image during cmd_chat/cmd_image called by skill_generate.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 12, 2026, 12:18 PM

Issues

1

Security Audit — snyk — background-replace