integration-hub
Warn
Audited by Snyk on Feb 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's SKILL.md shows IntegrationHub REST steps that call external APIs (e.g., rest_config with base_url "https://mycompany.atlassian.net/rest/api/3" and the "Call External API" REST step) and a script step that parses response.body to set outputs, meaning untrusted/user-generated API responses could be read and influence subsequent actions.
Audit Metadata