read-claude-web-conversation
Warn
Audited by Snyk on Jul 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). SKILL.md’s required runtime workflow fetches and renders the user’s logged-in Claude.ai conversation by executing in-page JS (extension/CDP/AppleScript) and then passes the resulting transcript text (including tool outputs and web_search “knowledge” bodies) into
scripts/render_transcript.py, so outsider-authored free text from the conversation/share payload is ingested into the agent’s LLM context via the generatedtranscript.md.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata