bridge-gemini

Warn

Audited by Snyk on Mar 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill's Subagent Mode and CLI reference explicitly describe spawning subagents (when .gemini/settings.json experimental.enableAgents is true) and include a built-in "Browser" subagent for web automation via Chrome DevTools, meaning the bridge can invoke browsing of open/public websites and ingest their content into agent workflows without per-step confirmation (see "Subagent Mode" in SKILL.md and "Built-in agents" / "Browser | Web automation via Chrome DevTools" in cli-reference.md).

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 12, 2026, 04:21 PM
Issues
1