premium-domains

Warn

Audited by Snyk on Mar 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md shows it calls an open API (https://api.domaindetails.com/api/marketplace/search?domain=...) that ingests listing data from public marketplaces (Afternic, Sedo, Atom, Dynadot, Namecheap, NameSilo, Unstoppable Domains) and returns untrusted, user-generated listing content and URLs which the agent would read and could influence subsequent decisions or actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 17, 2026, 07:04 AM
Issues
1