app-extensions
Warn
Audited by Snyk on Aug 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). templates.md’s generated ShareViewController.swift runtime path reads arbitrary provider-supplied plain text/URLs/images/files from extensionContext/inputItems and provider.loadItem, which can originate from outsider-authored shared content delivered via the system share sheet.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata