NYC

supabase-detect

Warn

Audited by Snyk on Feb 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). This skill fetches and analyzes HTML source, JavaScript bundles, and network endpoints from a user-supplied, publicly accessible target URL (e.g., "Prerequisites: Target URL must be publicly accessible" and "Searches for Supabase-related domains in: HTML source code, JavaScript bundles, Network requests"), so it ingests untrusted third-party web content that could carry indirect prompt injections.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 15, 2026, 08:28 PM