web-automation
Warn
Audited by Snyk on Apr 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly describes navigating, analyzing DOM, and extracting data from pages (e.g., "Navigate between pages", "Analyze DOM structure", "Extract all product information from this page"), which clearly requires fetching and interpreting arbitrary web pages whose content is untrusted and can influence subsequent automated actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata