diagram-design

Warn

Audited by Snyk on Nov 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). The skill's required runtime workflow reads only the user's own request, bundled reference files, and the user's local source diagrams (draw.io, Mermaid, Excalidraw) plus optional brand tokens and profiles, with no monitored outsider-writable queue or feed; the only external sources are public brand websites that are optional and not required, and the import path treats source content as data the user supplies, so no outsider-authored free text is required to be ingested.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 13, 2026, 07:30 PM
Issues
1