ts-agent-sdk
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The SDK templates include code that fetches and ingests external, public third‑party content (e.g., templates/api/public/holidays.ts calls the Nager.Date API, templates/api/webhook.ts and templates/api/base.ts provide generic get/post/request functions and triggerZapier/triggerMake that can fetch arbitrary URLs, and templates/api/gemini.ts/workers-ai.ts call external AI APIs), so the agent-provided/generated SDK will read and programmatically interpret untrusted public web content that could influence subsequent actions.
Audit Metadata