phaser-tilemap
Warn
Audited by Snyk on Apr 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly loads and parses user-created Tiled JSON map files (e.g., this.load.tilemapTiledJSON('level1','assets/tilemaps/level1.json')) and uses object properties via map.findObject / filterObjects and parseProperties to drive spawning, triggers, and behavior, meaning untrusted/user-generated map JSON and tileset data can be ingested at runtime and materially influence actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata