aptx-api-core-python

Warn

Audited by Snyk on Apr 7, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill documents an HTTP client that makes requests to arbitrary external endpoints (e.g., create_api_client(base_url="https://api.example.com") and get_api_client().execute_async(spec, ...)) and shows the runtime handling of untrusted response content (HttpError.body_preview, BusinessErrorMiddleware inspecting res.data), so third‑party responses can be ingested and influence tool behavior.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 7, 2026, 04:59 PM
Issues
1