chaport
Warn
Audited by Snyk on Mar 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md shows the skill fetches and processes user-generated Chaport chat data (e.g., "List Chat Events", "Get Visitor's Last Chat") via Membrane's API, so untrusted visitor content could be read and influence subsequent actions like sending messages or updating records.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata