daily-ui-inspiration-capture
Warn
Audited by Snyk on Aug 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). SKILL.md describes browser/capture of “live, inspectable landing pages” selected from an external design feed (e.g., Framer Marketplace/Dribbble) without requiring the agent to first select a specific outsider-authored item based on user-provided identifiers; thus outsider-authored text on those pages can be ingested during capture via the Codex in-app browser.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata