brand-library-architect
Warn
Audited by Snyk on Jul 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). Phase 0 “Discovery” explicitly reads repo files and also “fetch[es]” user-provided URLs (Step 4) and extracts their content into
brand/discovery.md, which is then used as LLM context in later phases—this can include outsider-authored free text from public web pages.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata