doe-geothermal
Warn
Audited by Snyk on Mar 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and parses public, user-editable OpenEI Semantic MediaWiki pages (https://openei.org/w/api.php) and scrapes GDR HTML (https://gdr.openei.org/) as required runtime data sources (see SKILL.md and references/python_example.py), so untrusted third‑party content is read and used to drive parsing, filtering, summaries, and subsequent decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata