api-baas-supabase

Warn

Audited by Snyk on Apr 7, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill includes an Edge Function webhook handler in examples/edge-functions.md (supabase/functions/handle-webhook/index.ts) that ingests and parses JSON webhook payloads from third-party services and uses event.type to drive database updates, meaning untrusted external content can directly influence actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 7, 2026, 01:32 AM
Issues
1