excalidraw
Warn
Audited by Snyk on Apr 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's required workflow and FAQ explicitly instruct fetching component libraries from the public site https://libraries.excalidraw.com (and references open files at https://excalidraw.com), which are open third‑party sources the agent is expected to download and use to build diagrams, so untrusted external content can influence component selection and subsequent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata