intlayer-config
Warn
Audited by Snyk on Mar 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's documentation (references/concept_configuration.md and SKILL.md) explicitly describes an importMode "fetch" and liveSync/cmsURL/backendURL settings that use the live-sync API and Intlayer CMS to fetch remote dictionaries/content at runtime, meaning the agent will ingest third-party CMS content which can be used by AI features (e.g., auto-fill) and thus could materially influence behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata