exasol-database
Warn
Audited by Snyk on Mar 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs importing/reading remote, potentially public sources (e.g., IMPORT INTO ... FROM CSV AT s3_conn / HTTP/HTTPS and exapump upload of external files) as part of its required workflow (see references/import-export.md and SKILL.md route for remote files), so untrusted third-party file contents would be ingested and could influence subsequent SQL and actions.
Audit Metadata