doe-geothermal

Warn

Audited by Snyk on Mar 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and parses public, user-editable OpenEI Semantic MediaWiki pages (https://openei.org/w/api.php) and scrapes GDR HTML (https://gdr.openei.org/) as required runtime data sources (see SKILL.md and references/python_example.py), so untrusted third‑party content is read and used to drive parsing, filtering, summaries, and subsequent decisions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 15, 2026, 06:30 PM
Issues
1