nostr

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 1.00). The skill instructs clients to fetch and subscribe to open public Nostr relays and HTTP endpoints (e.g., WebSocket relays like wss://relay.damus.io, NIP-11 relay info via HTTP, and NIP-05 /.well-known/nostr.json) and to query/process events and user-generated content from those relays, meaning the agent will read and interpret untrusted third-party content.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 09:10 PM