faststore-data-fetching

Warn

Audited by Snyk on Apr 6, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs adding third-party API extensions (e.g., src/graphql/thirdParty/resolvers/reviews.ts) that fetch and ingest external, potentially user-generated data (example: https://api.reviews-service.com/products/.../reviews) into GraphQL resolvers and fragments so that this untrusted content is read and used by the application, which can materially influence behavior and downstream actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 6, 2026, 06:42 PM
Issues
1