jotai-nextjs
Warn
Audited by Snyk on Feb 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs the agent to re-check package versions and scan recent releases and external docs at runtime (see "Version baseline (re-check when invoked)" and reference/sources.md which lists npm, GitHub releases, jotai.org links and mcporter/context7 retrieval commands), meaning it will fetch and interpret public third‑party web content that can change behavior or recommendations.
Audit Metadata