carbon-ads
Warn
Audited by Snyk on Apr 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). SKILL.md (see "Searching for actions", "Running actions", and "Proxy requests") instructs the agent to use the Membrane CLI to list/run actions and proxy arbitrary requests to the Carbon Ads API, meaning the agent will fetch and interpret third‑party API responses that can influence which actions it performs.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata