wow-api-guild
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly reads and acts on user-generated in-game content (e.g., guild chat via C_Club.GetStreams/C_Club.SendMessage, GUILD_MOTD, GetGuildBankText, and GetGuildRosterInfo in SKILL.md), which are untrusted third-party messages that the agent would ingest and could materially influence actions.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly exposes guild bank monetary functions (e.g., DepositGuildBankMoney(amount), WithdrawGuildBankMoney(amount), BuyGuildBankTab(), GetGuildBankMoney(), GetGuildBankMoneyTransaction(...)). These are specific, purpose-built APIs to move or modify in-game currency and perform monetary transactions within the guild bank, not generic tooling. Therefore it grants direct financial execution capability (for the game's currency).
Audit Metadata