aliyun-airec-manage

Warn

Audited by Snyk on Apr 29, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's required workflow and scripts (scripts/list_openapi_meta_apis.py and references/sources.md) explicitly fetch and consume the public API metadata JSON from https://api.aliyun.com/meta/v1/products/Airec/versions/2020-11-26/api-docs.json, which the SKILL.md tells the agent to use for API discovery and thus can materially influence subsequent API-calling decisions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 29, 2026, 02:27 AM
Issues
1