fluentui-react-v9
Warn
Audited by Snyk on Mar 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's SKILL.md explicitly directs the agent to fetch and read public online documentation (e.g., https://storybooks.fluentui.dev/react/llms.txt and https://storybooks.fluentui.dev/react/llms/{filename}.md) using WebFetch when local files are unavailable, which exposes it to untrusted/public third‑party content that could influence behavior.
Audit Metadata