visant-mcp-connect
Warn
Audited by Snyk on Nov 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The workflow utilizes
document-extractto ingest content from arbitrary user-provided or public URLs (such as Behance or portfolios) and extracts text/images into the agent's context.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill connects to the Visant Labs MCP and manages creative/design assets (brand guidelines, mockups, creative studio, moodboards) and features budget planning tools (
budget-create,budget-list,budget-get,budget-update,budget-delete,budget-duplicate). Budget management represents indirect financial operations (creating or tracking budgets/estimates) rather than direct payment execution. Furthermore, authentication is established via OAuth 2.1 + PKCE or API keys.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata