protocolsio-integration
Warn
Audited by Snyk on Mar 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill explicitly fetches and ingests public, user-generated content from protocols.io (e.g., GET /protocols, GET /protocols/{id}, GET /protocols/{id}/comments and GET /publications shown in SKILL.md and references) and instructs the agent to read, analyze, and act on protocol content and comments as part of its workflows, which could allow indirect prompt injection from third-party content.
Audit Metadata