cloudflare-queues

Warn

Audited by Snyk on Mar 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). This skill accepts and processes arbitrary external messages (e.g., the webhook handler in templates/queues-producer.ts and Event Subscriptions/HTTP Publishing in SKILL.md) and the consumer code in templates/queues-retry-with-delay.ts calls fetch(data.url) using URLs from message.body, meaning untrusted third-party content is ingested and can influence runtime actions like outbound requests, retries, and acks.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 10, 2026, 03:48 AM