virality
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's verification and CLI steps explicitly fetch and inspect arbitrary public URLs (e.g., the lines using open "https://www.opengraph.xyz/url/$(echo $YOUR_URL...)", curl "$YOUR_URL" and "npx open-graph-scraper https://yoursite.com"), which causes the agent/workflow to read untrusted, user-provided web content.
Audit Metadata