charmkeeper-unit-tests
Warn
Audited by Snyk on Feb 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The SKILL.md "Writing unit tests" workflow explicitly directs the agent to consult external public pages (e.g., the Ubuntu ops migration doc and raw GitHub URLs such as raw.githubusercontent.com and github.com examples) as part of implementing fixtures and migrations, meaning the agent would fetch and interpret untrusted, user-hosted content that could influence test/code changes.
Audit Metadata