workers-observability

Warn

Audited by Snyk on Feb 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The skill includes Tail Worker code and documentation (e.g., tail-worker.ts and references/tail-workers.md / setup scripts) that ingest runtime TailEvent data — including event.request.url, console logs, and exception messages — and read/forward that untrusted, user-generated content into workflows and external integrations (Slack, PagerDuty, Datadog), so the agent would process arbitrary third‑party/user content at runtime.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 15, 2026, 09:33 PM