front

Warn

Audited by Snyk on Mar 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). This skill's SKILL.md shows runtime fetching of conversation and message content (e.g., the /conversations and /conversations/CONVERSATION_ID/messages endpoints and the message "body" field) from the Front helpdesk API, which are user-generated third-party contents the agent is expected to read and that can influence actions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 10, 2026, 12:17 PM