swiftui-patterns

Warn

Audited by Snyk on Mar 9, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill explicitly shows runtime fetching and rendering of untrusted third‑party content — e.g., SKILL.md's FeedView uses client.getFeed() (Async Data Loading / Feed example), references/lightweight-clients.md demonstrates URLSession-based clients with external base URLs, references/media.md loads remote images via LazyImage(url:), and references/deeplinks.md routes based on incoming URLs — all of which ingest/display external/user-generated content that can drive navigation or actions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 9, 2026, 03:45 AM