design-spells
Warn
Audited by Snyk on Mar 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's Execution Workflow step 2 explicitly instructs the agent to "Browse Design Spells" (https://www.designspells.com/), a public third-party website whose content the agent is expected to read and adapt, so untrusted external content could indirectly inject instructions affecting design decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata