threejs-qa-release

Warn

Audited by Snyk on Sep 2, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). The required skill workflow executes a Playwright script (inspect-threejs-canvas.mjs) that navigates to a local or user-provided URL (--url http://127.0.0.1:5188) to capture and inspect a Three.js game canvas, which constitutes an active fetch of untrusted or external web content at runtime.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 2, 2026, 10:29 PM
Issues
1