rust-learner

Warn

Audited by Snyk on Feb 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 1.00). The skill's inline mode explicitly fetches and scrapes public sites (e.g., lib.rs, crates.io, docs.rs, doc.rust-lang.org, releases.rs, and rust-clippy.github.io) and parses that third-party content as part of its workflow, exposing the agent to untrusted/user-authored web content that could carry indirect prompt-injection instructions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 27, 2026, 11:44 AM