app-clip
Warn
Audited by Snyk on Aug 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). In templates.md the runtime App Clip reads first-party free text only from a user-invocation URL via
onContinueUserActivity→InvocationHandler.handleInvocation(url:)→parseURL(_:), and the workflow never ingests outsider-authored chat/email/comment/support/ticket free text.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata