teams-e2e-test
Warn
Audited by Snyk on Mar 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly opens and inspects public Microsoft Teams web pages as part of its workflow (see SKILL.md Phase 1 interactive exploration with commands like
playwright-cli -s=teams goto "https://teams.cloud.microsoft/v2/#/conversations"and the generated fixture references/teams-fixture.ts that navigates to Teams), meaning it ingests untrusted, user-generated UI content which is read and used to drive test generation and actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata