@tank/frontend-craft
Warn
Audited by Snyk on May 31, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). The required runtime workflow for this skill is the offline-first CLI search/install, which reads cached registry catalog JSON (including outsider-authored
description,name,type,addCommandArgument) fromscripts/.cache/all-registries-components.jsonand then formats it into LLM-readable stdout text viascripts/search-components.py→format_results()/print(json.dumps(results)).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata