fabric
Warn
Audited by Snyk on Feb 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and processes arbitrary public web content and videos (e.g., "fabric -u 'URL'", "fabric -y 'https://youtube.com/watch?v=...'", and examples like "curl -s 'https://...' | fabric -p analyze_claims"), so the agent will ingest untrusted third-party/user-generated content that could carry indirect prompt injection.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs cloning/updating the Fabric repository at runtime from https://github.com/danielmiessler/fabric.git, and that repository contains the pattern/prompt templates the skill loads to drive agent behavior, so fetched remote content directly controls prompts and is a required dependency.
Audit Metadata