gifgrep
Warn
Audited by Snyk on Feb 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill queries public GIF providers (Tenor/Giphy via the --source option and API keys) and displays/outputs their results (TUI previews, JSON fields like title/tags/preview_url), thereby ingesting untrusted, user-generated third-party content that the agent would read and interpret.
Audit Metadata