dspy-ruby
Warn
Audited by Snyk on Feb 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill clearly allows fetching and ingesting untrusted, user-generated content (e.g., via DSPy::Tools::GitHubCLIToolset's github_api_request / list_issues / get_pr and DSPy::Image.from_url) which the agent is expected to read and interpret as part of its tool/agent workflows, exposing it to indirect prompt injection.
Audit Metadata