design-system
Warn
Audited by Snyk on Oct 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The workflow reads user-supplied local files (
--brand-doc,--design-spec), a local image (--logo), a remote website (--from-url), a local CSS file (--stylesheet), a Canvas app archive (--from-canvas-app), a code app path (--from-code-app), and a Figma file via API (--from-figma), which ingest outsider-authored free text into the agent context.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata