ai-friendly-cli
Warn
Audited by Snyk on Mar 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's architecture explicitly requires fetching and parsing external API schemas/discovery documents at runtime (see references/architecture.md "Dynamic Discovery" and "Schema Introspection" with fetch_schema/fetch or cache API schema), which ingests public third‑party documents that agents use to construct commands and therefore can materially influence tool behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata