flutter-workflow
Warn
Audited by Snyk on Mar 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's mandatory MCP tool calls (e.g., get_package_docs(package_name) with explicit pub.dev examples and get_material_design_guidelines(component) in the "Available MCP Tools" and workflow checklists) require fetching and interpreting public third‑party documentation and package pages that can contain untrusted, user‑provided content which will directly influence implementation decisions.
Audit Metadata