security-scan

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill ingests user-provided Snyk vulnerability reports and explicitly queries the public npm registry (e.g., npm view <package> versions --json) so it reads untrusted third-party content as part of its workflow, which could enable indirect prompt injection.