migrate-beaver-builder-to-gutenberg

Warn

Audited by Snyk on May 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill explicitly calls wordpress_extract_builder_content and other WordPress read/list tools to ingest Beaver Builder page/post meta (e.g., _fl_builder_data/_fl_builder_data_settings) — i.e., arbitrary user-generated site content including HTML modules and third‑party modules — and then parses that content to decide mappings and create Gutenberg duplicates, so untrusted third‑party content can materially influence actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 18, 2026, 05:28 PM
Issues
1
Security Audit — snyk — migrate-beaver-builder-to-gutenberg