virality

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The skill's verification and CLI steps explicitly fetch and inspect arbitrary public URLs (e.g., the lines using open "https://www.opengraph.xyz/url/$(echo $YOUR_URL...)", curl "$YOUR_URL" and "npx open-graph-scraper https://yoursite.com"), which causes the agent/workflow to read untrusted, user-provided web content.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 10:42 AM