aave-risk-assessor
Warn
Audited by Snyk on Mar 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's required workflow (Step 3: "Query On-Chain Data") explicitly fetches public on-chain user account data from AAVE Pool contracts on Ethereum/Arbitrum (the POOL_ADDRESSES) and uses those untrusted, user-controlled values to compute health factors and drive risk recommendations.
Audit Metadata