template-builder-ui
Warn
Audited by Snyk on Aug 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The runtime workflow for this skill ingests outsider-authored free text via the user-controlled template editor inputs (e.g., template name/body/header/button labels and JSON pasted in “Import from Meta” / “Create From Definition” flows), and that text is then sent for rendering/validation and preview (e.g., via
POST /v3/templatesandPOST /v3/messages), so an outsider can submit poison through those fields without selecting a specific predefined item first.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata