skill-install-dry-run-planner
Warn
Audited by Snyk on Aug 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In
skills/skill-install-dry-run-planner/scripts/plan_dry_run.py, the required workflow runswagents skills sync --dry-run --format jsonand then ingests/parses the resulting JSON payload to summarizemissing/unresolved/skippedrows, which can include outsider-authored free text from upstream catalog sources.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata