webwright-legal-pl

Warn

Audited by Snyk on Jul 14, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). Yes—at runtime the required workflow uses Playwright to fetch outsider-authored public web pages from EUR-Lex / sn.pl / orzeczenia.ms.gov.pl and then reads their HTML into LLM-readable prose via page.inner_text("body") / el.inner_text() and interpolates it into akt.md/orzeczenie.md (e.g., scripts/fetch_eurlex.py:109-220, scripts/fetch_orzeczenie.py:83-180).

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 14, 2026, 08:28 AM
Issues
1
Security Audit — snyk — webwright-legal-pl