coding-guidelines

Warn

Audited by Snyk on Feb 19, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's main instructions (SKILL.md "Research-First Approach" and several reference files like references/daisyui.md and references/expo.md) explicitly tell the agent to "use context7 to query current docs" and to query external documentation/public websites, so the agent is expected to fetch and interpret open third‑party content that can influence implementation decisions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 19, 2026, 06:26 PM