on511-route-monitor
Warn
Audited by Snyk on Feb 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill actively navigates and scrapes the public 511on.ca site (Playwright opening https://511on.ca/?lang=en) and directly fetches/parses public endpoints such as /api/route/getroutes, /map/mapIcons/Cameras, /map/mapIcons/WazeIncidents and /List/GetData/RoadConditions (see references/endpoints.md and scripts/collect_on511_route_data.mjs), so untrusted third-party content is ingested and parsed at runtime and can materially influence subsequent data extraction and actions.
Audit Metadata