whatsapp-messaging
Fail
Audited by Snyk on Feb 16, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs the agent to "present the webhook_url and verify_token clearly" from get_setup_info, which requires including secret credentials verbatim in its outgoing messages.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill calls get_conversation_history to read recent WhatsApp messages (user-generated, untrusted third-party content) which the agent is expected to interpret to continue the conversation, enabling indirect prompt injection.
Audit Metadata