workos-authkit-nextjs
Warn
Audited by Snyk on Feb 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). Yes — SKILL.md Step 1 explicitly instructs a blocking WebFetch of the public GitHub README at https://github.com/workos/authkit-nextjs/blob/main/README.md and to treat it as the source of truth, meaning untrusted third-party content can be read and can directly influence the agent's actions.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The skill explicitly issues a runtime WebFetch to https://github.com/workos/authkit-nextjs/blob/main/README.md and instructs the agent to treat that README as the authoritative source of truth, meaning externally fetched content will directly control the agent's instructions.
Audit Metadata