protocolsio-integration
Fail
Audited by Snyk on Feb 15, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The skill explicitly shows and requires embedding an access token in Authorization headers and inline code (e.g., token = "YOUR_ACCESS_TOKEN" and Authorization: Bearer YOUR_TOKEN), which would force the agent to handle or emit secret values verbatim in generated requests or code.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill integrates with the public protocols.io API and explicitly fetches and displays user-generated content (e.g., GET /protocols, GET /publications, GET /protocols/{id}/comments, workspace file search and downloads) which the agent is expected to read and interpret as part of workflows, exposing it to untrusted third-party content that could enable indirect prompt injection.
Audit Metadata