spacetimedb-rust
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The Procedures (Beta) section (example save_external_data calling fetch_from_url(&url)) explicitly allows HTTP requests to arbitrary URLs, so the skill can ingest untrusted third-party web content provided at runtime which the agent would read or process.
Audit Metadata