scout-api

Warn

Audited by Snyk on Feb 25, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill's required workflows call the Scout APM REST API (https://scoutapm.com/api/v0) to fetch runtime data such as traces, error_groups, stacktraces, and request_params—which are third-party/authenticated-but-arbitrary user-generated content that the agent is expected to read and use to drive analysis and next actions—so untrusted content could indirectly inject instructions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 25, 2026, 05:11 PM