teams-e2e-test

Warn

Audited by Snyk on Mar 24, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill explicitly opens and inspects public Microsoft Teams web pages as part of its workflow (see SKILL.md Phase 1 interactive exploration with commands like playwright-cli -s=teams goto "https://teams.cloud.microsoft/v2/#/conversations" and the generated fixture references/teams-fixture.ts that navigates to Teams), meaning it ingests untrusted, user-generated UI content which is read and used to drive test generation and actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 24, 2026, 03:22 AM
Issues
1