snapwidget@1.0.1
VERIFIED· install onlyPublisher claims: "Add social media feeds (Instagram, Facebook, TikTok, X, YouTube) and reviews (Google, G2, testimonials) to a website with SnapWidget. Use when the user wants an Instagram feed, social posts, a YouTube channel, Google or G2 reviews or testimonials on their website, or wants to change or install a SnapWidget widget." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-07 and scored it 84/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run
Static findings
CRITICAL
HTML comment carrying imperative instructions to the agentreferences/classicpress.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/classicpress. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/cmsimple.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/cmsimple. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/bludit.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/bludit. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/bigcommerce.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/bigcommerce. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/blogger.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/blogger. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/big-cartel.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/big-cartel. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/google-sites.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/google-sites. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/grav.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/grav. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/drupal.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/drupal. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/joomla.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/joomla. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/godaddy.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/godaddy. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/flatpress.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/flatpress. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/framer.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/framer. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/elementor.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/elementor. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/htmly.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/htmly. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/dotclear.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/dotclear. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/html-website.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/html-website. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/jimdo.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/jimdo. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/cubecart.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/cubecart. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/kajabi.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/kajabi. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/cratejoy.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/cratejoy. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/squarespace.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/squarespace. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/webnode.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/webnode. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/websitebaker.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/websitebaker. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/website-x5.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/website-x5. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/mijnwebwinkel.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/mijnwebwinkel. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/mijnwebwinkel-nl.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/mijnwebwinkel-nl. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/snappages.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/snappages. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/webflow.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/webflow. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/tumblr.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/tumblr. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/nicepage.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/nicepage. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/membervault.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/membervault. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/studio.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/studio. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/weebly.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/weebly. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/pagecloud.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/pagecloud. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/sitepad.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/sitepad. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/serendipity.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/serendipity. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/showit.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/showit. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/site123.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/site123. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/shopify.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/shopify. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/wix.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/wix. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/wondercms.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/wondercms. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/wordpress.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/wordpress. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.LOW
Prompt injectionreferences/mijnwebwinkel-nl.md:75 · Prompt injection — known jailbreak technique reference · informational: not an instruction file · informational: not an instruction file · informational: not an instruction file
AST01Open de pagina in je webshop. De widget staat op de plek van `[instagram-feed]`. Zie je nog de oude pagina? Open de pagina dan in een privévenster of leeg de cache van je browser.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.CRITICAL
HTML comment carrying imperative instructions to the agentreferences/zoho-sites.md:1 · HTML comment carrying imperative instructions to the agent
AST01From https://snapwidget.com/docs/install/zoho-sites. To change it, change the docs and run npm run references.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.LOW
Prompt injectionreferences/mijnwebwinkel-nl.md:57 · Prompt injection — known jailbreak technique reference · informational: not an instruction file · informational: not an instruction file · informational: not an instruction file
AST015. Gebruikt je widget **Lightbox** of **Shoppable (Lightbox)** als **Photo Link**? Dan heeft je SnapWidget-code twee extra regels: één met `snapwidget-lightbox.css` en één met `snapwidget-lightbox.js`Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.LOW
Prompt injectionreferences/mijnwebwinkel-nl.md:71 · Prompt injection — known jailbreak technique reference · informational: not an instruction file · informational: not an instruction file · informational: not an instruction file
AST01Wil je een tweede widget plaatsen? Maak dan een tweede tag met een eigen tekst, bijvoorbeeld `[instagram-grid]`. Gebruik die tekst in de `if`-regel van de tag en op je pagina.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.Cost to the agent
Instructions loaded
≈1,458 tok
1 file · 47 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.