fastkol-web3-content-pipeline
Warn
Audited by Snyk on Aug 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Source Polymarket Gamma API data is fetched at runtime via RealPolymarketTool.execute() (https://gamma-api.polymarket.com/events) and its untrusted free-text fields (e.g., item.get("title")) are then used to form the LLM script.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata