ux-ui-developer
Warn
Audited by Snyk on Apr 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's references/integrations.md and SKILL.md explicitly instruct connecting MCP servers (e.g., GitHub, GitLab, Jira, and the MCP Registry link) and state the agent will review code, PR diffs, issues, and real-time channels—i.e., it will fetch and interpret untrusted, user-generated content from public third-party repositories and trackers which can materially influence actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata