cloudflare-python-workers
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's workflow examples (e.g., templates/workflow-example.py's fetch_data step and multiple SKILL.md snippets) explicitly fetch and parse arbitrary external URLs (payload.get("url", ...) / fetch("https://api.example.com")), meaning the agent ingests untrusted third‑party web content as part of its workflow and that content can directly affect processing and subsequent actions.
Audit Metadata