canary
Warn
Audited by Snyk on Apr 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). This skill explicitly navigates to user-supplied target URLs and ingests console messages, HTTP status codes, screenshots and page content (see SKILL.md Steps 2 "Baseline mode" and 4 "Monitor mode"), meaning it reads untrusted public web content that directly drives alerts and subsequent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata