validating-ai-ethics-and-fairness
Warn
Audited by Snyk on Mar 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill includes a runtime script (scripts/validate_model.py, function validate_model_api) that performs HTTP requests to arbitrary user-supplied endpoints (using urllib.request.urlopen) and then uses the response (accessibility/status) to set ethics_score and recommendations, so untrusted third‑party endpoint content can influence decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata