instabot
Warn
Audited by Snyk on Apr 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). This skill's SKILL.md shows it calls the external Instabot API via Membrane (e.g., "List Conversations", "Get Chat Details", "Search Chats" and the "membrane request" proxy example), meaning the agent fetches and interprets user-generated chat content from a third-party service that could contain instructions influencing actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata