landing-experience-checker

Warn

Audited by Snyk on Jul 6, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). The required runtime workflow ingests outsider-authored free text when it performs the keyless rendered-page read via firecrawl.py scrape <landing-url> --mobile, because the landing page content at an arbitrary destination URL is not authored by the operating user and is converted into readable markdown that the agent then analyzes for message-match/above-the-fold/form/mobile checks.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 6, 2026, 09:33 AM
Issues
1
Security Audit — snyk — landing-experience-checker