pdp-ecomm-template
Warn
Audited by Snyk on Jul 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). SKILL.md runtime flow includes “If
reference_page_urlis provided, analyze the page structure” and Step 1/3 implies fetching/parsing a public web page at that URL, whose free-form text could be read into the agent for section-by-section extraction (public web content → indirect prompt-injection risk).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata