baseproject-update
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill explicitly clones and ingests content from the public GitHub repository https://github.com/AutumnsGrove/BaseProject.git and then reads/parses/merges upstream .claude/skills/ and AGENT.md (public, user-authored content), so untrusted third-party content is consumed and interpreted as part of the workflow.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The skill performs a runtime git clone of https://github.com/AutumnsGrove/BaseProject.git and then syncs .claude/skills and AGENT.md from that cloned repo, so externally fetched content can directly control agent prompts/instructions and be introduced into the runtime codebase.
Audit Metadata