feature-image
Warn
Audited by Snyk on Mar 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's Phase 5 "Screenshot + overlay" explicitly asks the user for a URL and directs Playwright to navigate to that page and screenshot it, meaning the agent will fetch and interpret arbitrary public/third‑party web content (user-provided URLs) as part of its workflow, which could carry untrusted instructions.
Audit Metadata