justforfans-downloader
Warn
Audited by Snyk on Apr 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The SKILL.md "How It Works" and "Step-by-Step Tutorial" explicitly state the extension scans visible posts on JustForFans creator pages (public, user-generated content) and reads images, videos, and text to decide what to download, so untrusted third‑party page content can influence its behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata