instagram-carousel
Warn
Audited by Snyk on Mar 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's required workflow (SKILL.md Step 4 "Research & Data" and Step 2 "If the user provides a website URL, derive colors and style from it") explicitly requires fetching and verifying statistics and scraping user-provided or public websites, so the agent must read and act on untrusted third-party web content that can materially change content and layout decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata