Warn
Audited by Snyk on Mar 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's SKILL.md explicitly instructs the agent to fetch and read email message bodies from arbitrary IMAP servers (e.g., "Read a Message" using FETCH BODY.PEEK[] and other IMAP FETCH/SEARCH commands against $IMAP/...), exposing untrusted, user-generated third‑party email content that the agent is expected to interpret and act on (send replies, manage flags), which can materially influence subsequent actions and enable indirect prompt injection.
Audit Metadata