skills/athola/claude-night-market/code-search/Snyk

code-search

Warn

Audited by Snyk on May 12, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly executes web searches and parses GitHub search results (see steps "Execute queries via WebSearch" and "parse_github_result"/"build_github_api_search"), meaning the agent ingests public, user-generated GitHub content that could contain instructions influencing its actions.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

May 12, 2026, 08:34 PM

Issues

1