workers-observability
Warn
Audited by Snyk on Feb 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill includes Tail Worker code and documentation (e.g., tail-worker.ts and references/tail-workers.md / setup scripts) that ingest runtime TailEvent data — including event.request.url, console logs, and exception messages — and read/forward that untrusted, user-generated content into workflows and external integrations (Slack, PagerDuty, Datadog), so the agent would process arbitrary third‑party/user content at runtime.
Audit Metadata