web-clone
Warn
Audited by Snyk on Jul 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.78). High: the required runtime workflow uses Playwright to open OUTSIDER-provided URLs and extracts free-form DOM text (e.g.,
document.body.innerText, headings, link text) into JSON/Markdown outputs that are then used downstream (e.g., for DNA scaffolding), which can be treated as LLM-readable context; seescripts/recon-site.mjsandscripts/interaction-probe.mjs.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata