intlayer-config
Warn
Audited by Snyk on Mar 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill documentation explicitly describes fetching remote, potentially user-generated dictionaries via importMode: "fetch" and the live sync API (see SKILL.md and references/concept_configuration.md entries for importMode/fetch, cmsURL, liveSyncURL, and backendURL), meaning the agent will ingest external CMS/live-sync content at runtime which can influence AI translation/context and subsequent behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata