dataforseo
Warn
Audited by Snyk on Aug 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). In the required runtime workflow, the agent ingests outsider-authored free text only when it is explicitly provided by the caller as input fields (e.g.,
user_promptingetChatGptResponse, orkeyword/urlin other tools) and then submits those values to DataForSEO live endpoints; the workflow itself does not automatically read from an external feed/inbox/queue without the agent selecting specific caller-provided items.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata