skills/zafmy/threejs-skills/stitched-full-page-capture/Snyk

stitched-full-page-capture

Warn

Audited by Snyk on Nov 11, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (low risk: 0.10). The required workflow opens each manifest item's pageUrl in Playwright and screenshots the rendered page, so outsider-authored web page content is ingested, but only after the agent selects those specific URLs, which is the arbitrary-web-page case.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Nov 11, 2026, 04:45 PM

Issues

1