migrate-beaver-builder-to-gutenberg
Warn
Audited by Snyk on May 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly calls wordpress_extract_builder_content and other WordPress read/list tools to ingest Beaver Builder page/post meta (e.g.,
_fl_builder_data/_fl_builder_data_settings) — i.e., arbitrary user-generated site content including HTML modules and third‑party modules — and then parses that content to decide mappings and create Gutenberg duplicates, so untrusted third‑party content can materially influence actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata