gravity-forms
Warn
Audited by Snyk on Mar 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). This skill uses the Membrane connector to fetch and read Gravity Forms data (e.g., "List Form Entries", "Get Entry", "Get Form Results") and can proxy arbitrary site endpoints via
membrane request, which exposes the agent to user-generated/untrusted form entries and public site content that could contain instructions influencing subsequent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata