moai-domain-frontend

Warn

Audited by Snyk on Mar 1, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The SKILL.md core implementation explicitly calls Context7Client.get_library_docs to fetch '/react/docs' and '/vercel/docs' and then feeds those retrieved documents into the component_analyzer and performance_optimizer to drive architecture and performance decisions, meaning external/public documentation is ingested and can materially influence agent actions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 1, 2026, 01:07 AM