esp32-firmware-engineer

Warn

Audited by Snyk on Feb 25, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The skill's required workflow (SKILL.md step "Verify concrete compatibility evidence..." and references/dependency-compatibility.md) explicitly requires gathering and interpreting official compatibility matrices/release notes (public third-party docs) to decide whether to proceed with builds, so the agent is expected to read external web-hosted evidence that can materially change actions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 25, 2026, 05:47 PM