pollinations-ai
Warn
Audited by Snyk on Mar 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill constructs and fetches content from the open third‑party API endpoint https://image.pollinations.ai/prompt/{prompt} and the Multi-Agent Workflow (SKILL.md "Round 3 (Analyst
- Gemini)" and related steps) explicitly instructs agents to read and review those generated outputs to inform prompt improvements and downstream actions, so untrusted third‑party content is ingested and can materially influence agent decisions.
Audit Metadata