swiftui-patterns
Warn
Audited by Snyk on Mar 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly shows runtime fetching and rendering of untrusted third‑party content — e.g., SKILL.md's FeedView uses client.getFeed() (Async Data Loading / Feed example), references/lightweight-clients.md demonstrates URLSession-based clients with external base URLs, references/media.md loads remote images via LazyImage(url:), and references/deeplinks.md routes based on incoming URLs — all of which ingest/display external/user-generated content that can drive navigation or actions.
Audit Metadata