tool-design-style-selector

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill's "Recommended searches" step instructs running python scripts (python3 ~/.claude/skills/tool-ui-ux-pro-max/scripts/search.py "<...>" --domain ...) to fetch search results and synthesize 1–3 web results into the generated design-system, which clearly ingests open/public third-party content (web search results) that is untrusted and is read/interpreted as part of the workflow.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 01:01 AM