webcmd-autofix
Warn
Audited by Snyk on Jul 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.72). At runtime the skill reads
summary.md/trace-error.yamlfrom the trace directory (summaryPathfront matter) and may also readreceipt.json/trace.jsonl/network.jsonl/console.jsonl, which can include outsider-authored free text from the target website (e.g., page DOM text, network payload strings, console messages) that is then ingested into the LLM context for analysis/patching.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata