cycling-training
Warn
Audited by Snyk on Apr 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The SKILL.md "Companion Skills" and "Common workflow" explicitly instruct fetching data from the public, user-generated platform intervals.icu (e.g.,
$SKILLS_DIR/intervals-icu/scripts/api.sh wellness today) and then analyzing that data to drive zone calculations, load management, and plan decisions, which meets the criteria for ingesting untrusted third‑party content that can influence actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata