WCAG Compliance
Warn
Audited by Snyk on Mar 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The SKILL.md "Run Automated Tests" workflow and code examples (e.g., "Automated Testing with axe-core" and "Python/Selenium Testing" where driver.get('https://example.com') and axe.run(document) are used) show the agent loading and interpreting web pages from external sites, so it would ingest untrusted public web content that can influence testing decisions and remediation actions.
Audit Metadata