proxycurl
Warn
Audited by Snyk on Mar 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). This skill explicitly retrieves public, user-generated profile and company data from the Proxycurl API (via Membrane action runs and the "membrane request" proxy described in SKILL.md), which the agent will read and act on as part of its workflow, creating a clear avenue for untrusted third-party content to influence behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata