rtk-compress
Warn
Audited by Snyk on May 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md explicitly includes commands that fetch and present public third-party content (e.g., "rtk curl " under Data & Analytics and GitHub-related commands like "rtk gh pr view" / "rtk gh issue list" in the GitHub CLI section), so the agent will read and act on untrusted, user-generated web/GitHub content that could influence subsequent decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata