acdc
Warn
Audited by Snyk on Feb 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's required workflows instruct the agent to fetch and consume external registry and discovery endpoints (e.g., tel_observer_sync() "download and cache Registries from Registrar" in references/disclosure-ipex.md and tel-registry.md and "Bootstrap via OOBI linking endpoint to block SAID" in references/sections.md), which are open third-party sources whose untrusted content would be directly read and used to validate/state decisions.
Audit Metadata