diagram-design
Warn
Audited by Snyk on Nov 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The skill's required runtime workflow reads only the user's own request, bundled reference files, and the user's local source diagrams (draw.io, Mermaid, Excalidraw) plus optional brand tokens and profiles, with no monitored outsider-writable queue or feed; the only external sources are public brand websites that are optional and not required, and the import path treats source content as data the user supplies, so no outsider-authored free text is required to be ingested.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata