swiftui-navigation
Warn
Audited by Snyk on May 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill’s Deep Links documentation (SKILL.md and references/deeplinks.md) shows the app wiring .onOpenURL / .onContinueUserActivity to router.handle(url:) and using universal HTTPS links and AASA-hosted files (e.g., https://example.com/.well-known/apple-app-site-association), meaning arbitrary external/untrusted URLs are parsed and used to drive navigation/actions in the router.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata