rust-learner
Warn
Audited by Snyk on Feb 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's inline mode explicitly fetches and scrapes public sites (e.g., lib.rs, crates.io, docs.rs, doc.rust-lang.org, releases.rs, and rust-clippy.github.io) and parses that third-party content as part of its workflow, exposing the agent to untrusted/user-authored web content that could carry indirect prompt-injection instructions.
Audit Metadata