spring-boot-verify
Warn
Audited by Snyk on Apr 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's required workflow explicitly instructs using Exa MCP (mcp__exa__web_search_exa) to fetch latest Spring Boot docs (see SKILL.md "Lookup Docs" and WORKFLOW.md Step 6), which means the agent will ingest and act on untrusted public web content that can influence its verification decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata