aws-sdk-java-v2-messaging

Warn

Audited by Snyk on Mar 24, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The skill's runtime workflow shows it receiving and deserializing arbitrary SQS/SNS message bodies (e.g., "Implement Message Processing" and the Spring Boot receiveMessages/processMessage examples in SKILL.md and references/spring-boot-integration.md), and the doc even warns that "SQS/SNS messages may contain untrusted user-generated payloads", so the agent clearly ingests untrusted third-party content that could influence behavior.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 24, 2026, 03:20 PM
Issues
1