ts-agent-sdk

Warn

Audited by Snyk on Mar 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The SDK templates include code that fetches and ingests external, public third‑party content (e.g., templates/api/public/holidays.ts calls the Nager.Date API, templates/api/webhook.ts and templates/api/base.ts provide generic get/post/request functions and triggerZapier/triggerMake that can fetch arbitrary URLs, and templates/api/gemini.ts/workers-ai.ts call external AI APIs), so the agent-provided/generated SDK will read and programmatically interpret untrusted public web content that could influence subsequent actions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 10, 2026, 03:49 AM