dnanexus-integration
Warn
Audited by Snyk on Feb 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). This skill programmatically downloads and reads arbitrary user-provided DNAnexus data objects (e.g., dxpy.download_dxfile(), DXFile.open_file(), dxpy.find_data_objects / system_find_data_objects) and also allows unrestricted network access (runSpec "access": ["*"], pip/apt/docker pulls), so it clearly ingests untrusted third-party content that could carry indirect prompt injections.
Audit Metadata