ask-a-human
Warn
Audited by Snyk on Feb 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill submits prompts and fetches responses from a global pool of random humans via the Ask-a-Human API (https://api.ask-a-human.com / https://app.ask-a-human.com), which are untrusted, user-generated replies that the agent reads and uses in its decision workflow, exposing it to indirect prompt injection risk.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill makes runtime API calls to https://api.ask-a-human.com to fetch human responses that the agent uses to determine prompts/instructions (e.g., tone, wording, decisions), so external content from that URL directly controls agent behavior.
Audit Metadata