cloudflare-queues

Warn

Audited by Snyk on Feb 21, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 1.00). The skill's consumer examples (e.g., assets/queues-retry-with-delay.ts's callExternalAPI which does fetch(data.url) using message.body.data, assets/queues-consumer-basic.ts and assets/queues-producer.ts which accept webhook/payloads into message.body) show the runtime consuming and acting on untrusted, user-provided URLs and payloads—allowing third-party content to directly control fetches and retries and thus influence tool usage and actions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 21, 2026, 04:27 PM