webgl-3d-object
Warn
Audited by Snyk on Aug 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). demo/PROMPT.md and the demo HTML/source.json embed user-provided free text (e.g., “PulsoApps | Tu app lista en 5 días.” and other plan/pricing copy) into the runtime doc that is decoded into an iframe (demo/index.html: decode encodedHtml into frame.srcdoc and then loaded), so outsider-authored text is ingested by the runtime HTML renderer without selecting a specific trusted item.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata