skills/cruldra/skills/adapt-external-tsx-reference/Snyk

adapt-external-tsx-reference

Warn

Audited by Snyk on Mar 20, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly says "Use when the user pastes external TSX or React component code" — the agent is expected to ingest and interpret arbitrary user-provided/external TSX (untrusted third-party) as part of its workflow, which could contain instructions that influence its actions.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Mar 20, 2026, 08:18 PM

Issues

1