vaporwave-glassomorphic-ui-designer

Warn

Audited by Snyk on Mar 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The SKILL.md Design Discovery Workflow and MCP Integrations explicitly instruct the agent to query public sources (e.g., "Query 21st.dev: 'glassmorphic modal with blur'") and use MCPs like Firecrawl and WebFetch to fetch web documentation, so the agent will ingest and act on untrusted third‑party web content that can influence its decisions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 5, 2026, 09:10 PM