design-system
Warn
Audited by Snyk on Jul 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Skill
/design-systemingests outsider-authored free text when the user selects “(2) Free-text notes” in Sub-step 1 and the notes are applied as overrides during subsequent spec/token generation and preview.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata