design-builder
Warn
Audited by Snyk on May 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and ingests arbitrary public URLs and live sites (see references/copy.md Step 2A "Full-page URL" and references/inputs.md A1 "Brand URL or live site") and then reads and extracts text, tokens, and layout to drive DESIGN.md, previews, variant generation, and asset prompts—so untrusted third‑party content is directly read and can materially influence tool actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata