rivet-sdk

Warn

Audited by Snyk on Mar 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill's required workflow (SKILL.md and examples/getting-started-pattern.md / multi-client-pattern.md) instructs exposing /zoom/events webhook receivers and registering webEventConsumer event handlers that ingest Zoom webhook payloads (which can include user-generated Team Chat messages) and then act on them (e.g., invoke endpoints, post messages), so untrusted third-party content can influence runtime actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 13, 2026, 05:25 PM
Issues
1