cloudflare-queues
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). This skill accepts and processes arbitrary external messages (e.g., the webhook handler in templates/queues-producer.ts and Event Subscriptions/HTTP Publishing in SKILL.md) and the consumer code in templates/queues-retry-with-delay.ts calls fetch(data.url) using URLs from message.body, meaning untrusted third-party content is ingested and can influence runtime actions like outbound requests, retries, and acks.
Audit Metadata