variant-website
Warn
Audited by Snyk on Mar 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The SKILL.md and references explicitly state the skill ingests full rendered HTML/CSS/JS from the public site https://variant.com (via Jina r.reader and chrome-devtools) and the agent is expected to read and apply that extracted third‑party content to drive styling/component decisions, which clearly exposes the agent to untrusted public content that could indirectly inject instructions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata