ave-data-rest

Warn

Audited by Snyk on Mar 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). This skill calls the public AVE Cloud Data REST API (https://cloud.ave.ai/) via scripts/ave_data_rest.py to fetch on-chain token data (search, txs, trending, ranks, risk reports, holders, etc.) and explicitly instructs the agent in SKILL.md to read and interpret those JSON responses to determine risk levels, summaries, and follow-up actions, meaning untrusted public content can materially influence behavior.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 10, 2026, 05:11 PM