app-docs
Warn
Audited by Snyk on Mar 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's core workflow requires browsing a user-specified app URL and reading/interpreting page content (see "Get App Details" and "Discover All Routes" in SKILL.md — it uses browser automation to navigate pages, read sidebars/menus, wait for data, and "Just do it" autonomously), so untrusted third-party web content can directly influence agent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata