threejs-qa-release
Warn
Audited by Snyk on Sep 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The required skill workflow executes a Playwright script (
inspect-threejs-canvas.mjs) that navigates to a local or user-provided URL (--url http://127.0.0.1:5188) to capture and inspect a Three.js game canvas, which constitutes an active fetch of untrusted or external web content at runtime.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata