oma-design
Warn
Audited by Snyk on Jun 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). Runtime network fetch of outsider-authored free text occurs in Phase 2 Branch B:
bunx getdesign@latest add <brand>downloads external getdesign vendor markdown templates, which are then loaded into the agent’s LLM context (with prompt-injection framing).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata