visant-mcp-connect

Warn

Audited by Snyk on Nov 2, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). The workflow utilizes document-extract to ingest content from arbitrary user-provided or public URLs (such as Behance or portfolios) and extracts text/images into the agent's context.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill connects to the Visant Labs MCP and manages creative/design assets (brand guidelines, mockups, creative studio, moodboards) and features budget planning tools (budget-create, budget-list, budget-get, budget-update, budget-delete, budget-duplicate). Budget management represents indirect financial operations (creating or tracking budgets/estimates) rather than direct payment execution. Furthermore, authentication is established via OAuth 2.1 + PKCE or API keys.

Issues (2)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 2, 2026, 04:42 PM
Issues
2