skills/addyosmani/factory/factory-triage/Snyk

factory-triage

Warn

Audited by Snyk on Aug 26, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads GitHub issues (live label queue) as part of factory-triage, which allows outsiders to submit free text via GitHub issues that the agent then ingests for classification.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 26, 2026, 11:40 PM

Issues

1

Security Audit — snyk — factory-triage