intlayer-cli
Warn
Audited by Snyk on Feb 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill explicitly fetches and ingests user-editable content from a remote Intlayer CMS/editor (see the 'npx intlayer pull', Live Sync docs, and the 'login' command with --cms-url in SKILL.md/references), and that remote/user-generated content is read and used to update local dictionaries and drive subsequent CLI/AI actions, which could enable indirect prompt injection.
Audit Metadata