terrain-integration
Warn
Audited by Snyk on Mar 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's TerrainNetworkManager (SKILL.md and scripts) registers network handlers (e.g., handleModificationSync / FLATTEN_REQUEST, MODIFICATION_SYNC, FULL_SYNC) and directly applies incoming client/server modification data to TerrainModifier.flatten/raise/lower, which are untrusted user-generated multiplayer messages that can change terrain and thereby materially influence placement and tool behavior.
Audit Metadata