skills/miratcan/claude-skills/persona-driven-ux-walkthrough/Snyk

persona-driven-ux-walkthrough

Warn

Audited by Snyk on Jun 25, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.95). The skill’s runtime path /ux-walkthrough <url> uses Playwright to navigate to a user-supplied URL and then ingests page content via browser_snapshot/browser_take_screenshot (DOM/ARIA text), which is outsider-authored free text from arbitrary third-party web pages.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jun 25, 2026, 05:34 PM

Issues

1