wow-api-calendar-events
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's documentation and examples show the agent reading in-game, user-created calendar entries (e.g., C_Calendar.GetDayEvent and EventGetDescription in the "List Today's Events" and Day Events sections) and includes action functions that act on that content (e.g., EventInvite, MassInviteGuild), so untrusted player-generated text could be ingested and influence subsequent actions.
Audit Metadata