web-performance-optimization

Warn

Audited by Snyk on Feb 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill includes Puppeteer scripts that navigate to and evaluate arbitrary public URLs (references/compression-monitoring.md measurePerformance(url) and references/typescript-advanced.md measurePagePerformance(url)), which fetch and interpret untrusted third-party web content as part of its runtime workflow.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 15, 2026, 09:27 PM