studioai-prompt-enhance
Warn
Audited by Snyk on May 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs the agent to fetch user-provided HTTPS image URLs, base64-encode them, and pass them as data URLs to the enhancer (see the "Image attachments" section), so arbitrary/untrusted web-hosted images are ingested and can influence prompt generation.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata