compile-generation-prompts

Warn

Audited by Snyk on Jul 30, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). The skill runtime compiles the incoming payload (validated against schemas/input.schema.json) into provider_requests prompts/parameters, so any outsider-authored text inside payload can directly reach the model-free-text compilation output path without requiring fetching or searching a specific externally selected item.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 30, 2026, 07:35 AM
Issues
1
Security Audit — snyk — compile-generation-prompts