visual-parity-verification
Warn
Audited by Snyk on Nov 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The required workflow drives the user-supplied real app URL and prints the captured root's accessible name in the capture summary line, so page text from that app could reach the agent, which is at most low exposure because the page is selected by the caller rather than by an outsider.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata