ratatui-tui
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill includes a "Network Requests" example in references/async-patterns.md (fetch_data using reqwest::Client with self.api_url) which clearly shows fetching arbitrary HTTP URLs and feeding the JSON results into the app workflow, so untrusted/public third‑party content could be ingested and interpreted.
Audit Metadata