full-page-screenshot
Warn
Audited by Snyk on May 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The script's --url mode and proxy flow (scripts/full-page-screenshot.mjs) load arbitrary external URLs and execute/evaluate page context (Runtime.evaluate / proxyEval) to read DOM state and selectors, which the tool uses to decide waits, scrolling, expansion, and capture strategy—so untrusted third‑party page content can materially influence agent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata