node-deps
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill runs the taze CLI via ~/.claude/skills/node-deps/scripts/run-taze.sh and parses/displays taze output (package names and versions) which are fetched from public npm/package registries (untrusted third‑party content) and used directly to drive prompts and update actions.
Audit Metadata