Developer Advocate
Warn
Audited by Snyk on Aug 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). SKILL.md describes a workflow that can read outsider-authored GitHub issue text (“Read every GitHub issue opened in the last 30 days”) as part of Step 1, which would expose the agent to indirect prompt injection via those issue bodies/comments.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata