ui-cloner
Warn
Audited by Snyk on Apr 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly requires a target URL and its SKILL.md/workflow (and references/contract.yaml) instructs the agent to ingest cf-crawl outputs and run a visual audit on requested pages/sections—i.e., fetching and interpreting arbitrary public web pages—which exposes the agent to untrusted third-party content that could contain indirect prompt-injection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata