dex-improve
Warn
Audited by Snyk on May 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's Mode 2 and Phase 2 instructions explicitly require using WebSearch to "fetch current changelog" and "search web for latest Claude Code capabilities" (external public webpages), which the agent must read and interpret to decide recommended features and implementation steps—allowing third‑party page content to influence tool use and decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata