crimeometer
Warn
Audited by Snyk on Mar 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill explicitly fetches third-party crime data and user-generated content (e.g., "Get 911 Calls" and "Get Raw Incident Data" actions) from the CrimeoMeter API as part of normal workflows, so the agent would read and act on untrusted external content obtained via the listed Membrane action calls and proxy requests.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata