analytics-setup
Warn
Audited by Snyk on Mar 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's automated "claude-in-chrome" workflow explicitly navigates to and interacts with the user's public website (the URL supplied for GTM/GA4 setup) and public pages during GTM Preview/Debug (see "Automated Setup (claude-in-chrome)" and "Phase 5: Debug & QA"), so arbitrary third-party/site content will be fetched and interpreted as part of testing and actions and could therefore influence subsequent behavior.
Audit Metadata