flutter-workflow

Warn

Audited by Snyk on Mar 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's mandatory MCP tool calls (e.g., get_package_docs(package_name) with explicit pub.dev examples and get_material_design_guidelines(component) in the "Available MCP Tools" and workflow checklists) require fetching and interpreting public third‑party documentation and package pages that can contain untrusted, user‑provided content which will directly influence implementation decisions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 11, 2026, 02:13 AM