dast-nuclei
Warn
Audited by Snyk on Feb 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill instructs running Nuclei against arbitrary public targets (e.g.,
nuclei -u <target-url> -jsonl) and to update/use 8000+ community templates (nuclei -update-templates), so the agent would ingest and parse untrusted third‑party content from public websites and community template repositories as part of its workflow.
Audit Metadata