google-image-crawler

Warn

Audited by Snyk on Feb 19, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill's core workflow (SKILL.md and core/crawler.py) explicitly automates visits to Google Images (https://www.google.com/search?tbm=isch) with Playwright and scrapes /imgres links and source pages to extract original image URLs and metadata from arbitrary public websites, so it ingests untrusted third‑party content that directly determines subsequent downloads and actions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 19, 2026, 03:58 PM