nextjs-react
Warn
Audited by Snyk on Mar 31, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). This skill's SKILL.md "Fetch live docs" step explicitly directs the agent to fetch and web-search public third-party sources (e.g., nextjs.org, docs.saleor.io, GitHub repositories, and the explicit URL https://docs.saleor.io/docs/developer/app-store/apps/overview), requiring the agent to ingest and act on external content that can influence its coding decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata