dotnet-htmlhint
Warn
Audited by Snyk on Apr 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). This skill explicitly permits linting a "reachable URL" as a target (Workflow step 1) and shows running htmlhint against a deployed URL in the bootstrap steps (Bootstrap When Missing step 4:
npx htmlhint https://example.com), so the agent may fetch and interpret arbitrary public webpages as part of its workflow, exposing it to untrusted third‑party content.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata