moai-essentials-perf
Warn
Audited by Snyk on Mar 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow repeatedly calls Context7 (e.g., context7.get_library_docs with context7_library_id="/plasma-umass/scalene") to fetch community/“Live Performance Patterns” that are then parsed and used to build commands, match patterns, and drive optimization actions, meaning untrusted third‑party content can directly influence decisions and tool use.
Audit Metadata