mobile-developer
Warn
Audited by Snyk on Feb 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill’s useQuery hook (hooks/useQuery.ts) and its HomeScreen (app/(tabs)/index.tsx) fetch and render posts from an external API URL (https://api.example.com/posts), meaning the agent consumes and displays remote, potentially user-generated third‑party content.
Audit Metadata