nft-art-generation

Warn

Audited by Snyk on Feb 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill's SSE event documentation (references/SSE-EVENTS.md) and the "Web Search" event flow explicitly show web_search_query and web_search_citations producing arbitrary public URLs/citations that the agent uses to form responses, indicating it fetches and ingests open web content that could influence its actions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 20, 2026, 07:57 AM