article-icons
Warn
Audited by Snyk on Jul 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). The required runtime workflow runs
scripts/fetch_icon.py, which fetches icon JSON from the public itshover site (https://itshover.com/r/<name>.jsonandregistry.json) and then injects the returned<svg>markup into the agent’s LLM context as readable SVG text for embedding.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata