Farcaster Social Protocol Handler
Warn
Audited by Snyk on Aug 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). scripts/cast_manager.py (CastManager.search_casts) calls Neynar’s cast search endpoint with a user-provided query and then ingests cast text returned by the protocol at runtime.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly targets a blockchain social protocol on Optimism and exposes transaction-related features: it lists support for interactive Frame buttons including "mint" and "tx", notes "Transaction frame support", describes using a managed signer (signer_uuid) via the Neynar API, and even references minting NFTs directly in the feed. These are specific crypto transaction/signing capabilities (wallet/signing/minting) — i.e., direct financial/crypto execution authority.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata