game-assets
Warn
Audited by Snyk on Mar 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to perform WebSearch and download public images/logos/meme references (see character-pipeline.md tier 1 "Find Expression Images via WebSearch" and integration-patterns.md "External Asset Download" / "Meme Image Integration" which direct downloading arbitrary image_url), so it ingests untrusted third‑party web content that the agent is expected to read and use to drive asset-creation decisions.
Audit Metadata