new-api-support

Warn

Audited by Snyk on Feb 23, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The workflow's Step 2 explicitly instructs the agent to "use web search" and consult public sources like Apple documentation, WWDC sessions, tutorials and Stack Overflow to research usage patterns, which requires fetching and interpreting untrusted, user-generated third‑party content that can influence testing and implementation decisions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 23, 2026, 12:15 PM