datocms-cda
Warn
Audited by Snyk on May 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill explicitly issues GraphQL reads to the public DatoCMS Content Delivery API (e.g., executeQuery/rawExecuteQuery against https://graphql.datocms.com in references/client-and-config.md and SKILL.md) to ingest site content (posts/pages/structured text, uploads) that is user-generated and is then parsed/used by the agent as part of its workflow, so untrusted third‑party content could indirectly inject instructions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata