performance-profiling
Warn
Audited by Snyk on Feb 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's lighthouse_audit.py (and SKILL.md usage "python scripts/lighthouse_audit.py ") runs Lighthouse on arbitrary URLs, causing the agent to fetch and ingest untrusted public web pages whose content can affect the generated report and thus influence subsequent decisions.
Audit Metadata