llamaparse-mcp

Warn

Audited by Snyk on May 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). This skill's SKILL.md instructs the agent to fetch files from arbitrary public URLs using "uploadFileByUrl" and to parse/extract that content with "parseFile" (often passing markdown to an LLM), meaning untrusted third‑party content from the open web can be ingested and influence downstream parsing, classification, and actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 5, 2026, 02:37 PM
Issues
1