referralhero

Warn

Audited by Snyk on Mar 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The skill's SKILL.md instructs using the Membrane CLI to run actions and proxy requests against the ReferralHero API (e.g., "membrane action list/run" and "membrane request CONNECTION_ID /path/to/endpoint"), which causes the agent to fetch and read third‑party user-generated referral/contact data from an external service that could influence subsequent actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 15, 2026, 09:44 AM
Issues
1