web-quality
Warn
Audited by Snyk on Apr 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's audit workflow and testing checklists explicitly show running audits against public URLs (e.g., web-quality-audit SKILL.md "How it works" plus commands in accessibility-SKILL.md and performance-SKILL.md like "npx lighthouse https://example.com" and "axe https://example.com"), which implies the agent will fetch and interpret arbitrary third-party webpages as part of its analysis.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata