acdc

Warn

Audited by Snyk on Feb 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's required workflows instruct the agent to fetch and consume external registry and discovery endpoints (e.g., tel_observer_sync() "download and cache Registries from Registrar" in references/disclosure-ipex.md and tel-registry.md and "Bootstrap via OOBI linking endpoint to block SAID" in references/sections.md), which are open third-party sources whose untrusted content would be directly read and used to validate/state decisions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 26, 2026, 04:47 PM