jotai-nextjs

Warn

Audited by Snyk on Feb 22, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs the agent to re-check package versions and scan recent releases and external docs at runtime (see "Version baseline (re-check when invoked)" and reference/sources.md which lists npm, GitHub releases, jotai.org links and mcporter/context7 retrieval commands), meaning it will fetch and interpret public third‑party web content that can change behavior or recommendations.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 22, 2026, 05:27 AM