pentest-vuln-verify-test

Warn

Audited by Snyk on Feb 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 1.00). This skill's verify.sh uses curl to fetch and parse an arbitrary target_url (as shown in verify.sh and scan_demo.sh) and then reads response headers/body to decide success, meaning it ingests untrusted public web content provided via URLs and could therefore be exposed to indirect prompt injection.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 18, 2026, 05:57 PM