simulating-flash-loans
Warn
Audited by Snyk on Mar 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's workflow and docs (SKILL.md and ARD.md) explicitly perform "Price Discovery" and "Fetch current DEX prices" and query public RPC endpoints and third‑party APIs (see config/settings.yaml and the Resources list referencing DeFiLlama, Etherscan, The Graph and public RPC URLs), so the agent ingests open/public, untrusted web data that directly drives simulation, provider selection, and risk/decision outputs.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata