retently

Warn

Audited by Snyk on Mar 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly supports sending proxy requests to the Retently API via Membrane ("membrane request CONNECTION_ID /path/to/endpoint") and the integration is for managing Retently survey Responses (user-generated feedback), so the agent would fetch and act on untrusted third‑party content that could alter follow-up actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 11, 2026, 05:46 PM
Issues
1