google-image-crawler
Warn
Audited by Snyk on Feb 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's core workflow (SKILL.md and core/crawler.py) explicitly automates visits to Google Images (https://www.google.com/search?tbm=isch) with Playwright and scrapes /imgres links and source pages to extract original image URLs and metadata from arbitrary public websites, so it ingests untrusted third‑party content that directly determines subsequent downloads and actions.
Audit Metadata