skills/alpacalabsllc/skills-for-architects/product-url-clip/Snyk

product-url-clip

Warn

Audited by Snyk on Sep 23, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (low risk: 0.10). The skill uses WebFetch to retrieve arbitrary user-supplied product URLs, allowing outsider-authored web page content to enter the agent workflow.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 23, 2026, 01:02 PM

Issues

1