drawing-control
Warn
Audited by Snyk on Mar 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill explicitly ingests and parses incoming third-party PDFs/ASI documents (see "ASI Processing Workflow" steps 2 and 5 and the "document-intelligence" integration that "Scans incoming PDFs for sheet numbers, revision blocks, ASI references") and then automatically updates revisions and triggers distributions, so arbitrary external documents can materially influence agent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata