digikey
Warn
Audited by Snyk on Mar 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill explicitly fetches product data and datasheet PDFs from public third-party sources (DigiKey API and manufacturer URLs via the DatasheetUrl fields) and then downloads and parses those PDFs at runtime (see SKILL.md and scripts/fetch_datasheet_digikey.py and scripts/sync_datasheets_digikey.py), so untrusted web-hosted content is ingested and used to influence verification and downstream decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata