kafka-consumer-implementation
Warn
Audited by Snyk on Feb 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's runtime workflow explicitly ingests and processes messages from Kafka topics (e.g., OrderEventConsumer.consume() reading from brokers/topics such as "orders" shown in SKILL.md and references/detailed-implementation.md), which are arbitrary third-party/untrusted message sources whose payloads directly drive processing, commits, and downstream actions.
Audit Metadata