rivet-sdk
Warn
Audited by Snyk on Mar 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's required workflow (SKILL.md and examples/getting-started-pattern.md / multi-client-pattern.md) instructs exposing /zoom/events webhook receivers and registering webEventConsumer event handlers that ingest Zoom webhook payloads (which can include user-generated Team Chat messages) and then act on them (e.g., invoke endpoints, post messages), so untrusted third-party content can influence runtime actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata