skills/forcedotcom/sf-skills/experience-lwc-runtime-observe/Snyk

experience-lwc-runtime-observe

Warn

Audited by Snyk on Aug 14, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). SKILL.md Step 2 navigates to a Salesforce CLI-generated preview URL and uses a browser automation driver to extract the live rendered DOM subtree (including shadow DOM via element.shadowRoot.innerHTML), which ingests page content that can be influenced by third-party authorship in the preview.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 14, 2026, 12:16 PM

Issues

1

Security Audit — snyk — experience-lwc-runtime-observe