visual-parity-verification

Warn

Audited by Snyk on Nov 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). The required workflow drives the user-supplied real app URL and prints the captured root's accessible name in the capture summary line, so page text from that app could reach the agent, which is at most low exposure because the page is selected by the caller rather than by an outsider.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 11, 2026, 02:05 PM
Issues
1