fortify-fod
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). This skill calls Fortify on Demand APIs (e.g., fcli_fod_issue_list and related issue endpoints) and explicitly ingests and presents user-generated comments/recommendations (comments[] including Fortify Aviator suggestions) and embedded issue details from the FoD service, so the agent will read third-party/untrusted content returned by that external service.
Audit Metadata