diagram-design-editorial

Warn

Audited by Snyk on May 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill's Brand Onboarding workflow explicitly instructs Claude to "fetches homepage" and "extracts dominant palette + font stack" from arbitrary sites (see "Brand Onboarding" in SKILL.md), so it ingests content from open/public third‑party webpages which directly influences diagram generation and token/behavior decisions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 16, 2026, 07:26 PM
Issues
1