lens-studio-user-context
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly reads untrusted, user-generated Poster data from Snapchat via the DynamicResponseComponent (dynamicResponse.getPosterData in the "Dynamic Response" section), and also ingests friends' user data (FriendsComponent.getFriends and Bitmoji resources), which the agent is expected to interpret and can materially influence UI/game logic.
Audit Metadata