Farcaster Social Protocol Handler

Warn

Audited by Snyk on Aug 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). scripts/cast_manager.py (CastManager.search_casts) calls Neynar’s cast search endpoint with a user-provided query and then ingests cast text returned by the protocol at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly targets a blockchain social protocol on Optimism and exposes transaction-related features: it lists support for interactive Frame buttons including "mint" and "tx", notes "Transaction frame support", describes using a managed signer (signer_uuid) via the Neynar API, and even references minting NFTs directly in the feed. These are specific crypto transaction/signing capabilities (wallet/signing/minting) — i.e., direct financial/crypto execution authority.

Issues (2)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 3, 2026, 07:53 PM
Issues
2
Security Audit — snyk — Farcaster Social Protocol Handler