unity-vrc-udon-sharp
Warn
Audited by Snyk on May 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly requires and demonstrates loading and parsing external web content (e.g., SKILL.md's "Reference Loading Guide" marking "Downloading strings/images from web" as mandatory and CHEATSHEET.md examples using VRCStringDownloader.LoadUrl(url, ...) and VRCImageDownloader.DownloadImage), which ingests untrusted public URLs/JSON/images that can materially change runtime behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata