configure-linting
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md Step 2 explicitly instructs the agent to use WebSearch/WebFetch to check current versions on public sites (e.g., biomejs.dev, docs.astral.sh, GitHub releases, releases.rs), meaning the agent will fetch and interpret untrusted third‑party web content that can influence configuration and tool-selection actions.
Audit Metadata