charmkeeper-unit-tests

Warn

Audited by Snyk on Feb 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The SKILL.md "Writing unit tests" workflow explicitly directs the agent to consult external public pages (e.g., the Ubuntu ops migration doc and raw GitHub URLs such as raw.githubusercontent.com and github.com examples) as part of implementing fixtures and migrations, meaning the agent would fetch and interpret untrusted, user-hosted content that could influence test/code changes.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 20, 2026, 10:07 PM