faststore-data-fetching
Warn
Audited by Snyk on Apr 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs adding third-party API extensions (e.g., src/graphql/thirdParty/resolvers/reviews.ts) that fetch and ingest external, potentially user-generated data (example: https://api.reviews-service.com/products/.../reviews) into GraphQL resolvers and fragments so that this untrusted content is read and used by the application, which can materially influence behavior and downstream actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata