creating-secrets-using-best-practices
Warn
Audited by Snyk on May 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's required parameter acquisition explicitly mandates supporting "URL: Link to configuration resources" (references/create-secrets-using-best-practices.md), meaning the agent will fetch and interpret arbitrary external URLs as part of its workflow to determine secret creation and policy actions, which could allow untrusted third-party content to influence tool use and decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata