syncfusion-flutter-pdf
Warn
Audited by Snyk on Mar 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's required workflows (Mode 2 temp script creation and "build script from references/*.md") plus reference examples such as references/images.md ("Insert Image from Web URL") and digital-signature.md (timestamp server URI) show the agent will generate and/or run code that fetches arbitrary web URLs or external servers, exposing it to untrusted third-party content (arbitrary URLs) that can influence runtime behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata