architect-enterprise-ai
Warn
Audited by Snyk on Jun 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). Outsider free text is ingested via the skill’s runtime “Browser-as-runtime for agents” workflow (G), where the agent uses headless browser tools to fetch and read arbitrary web page content (public web content) into the LLM context.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata