sonarqube-autofix
Warn
Audited by Snyk on Sep 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The skill downloads issue reports from a SonarQube server via an API query in
references/download-issues.shand ingests the resulting JSON data into the agent's context, where issue descriptions, messages, and rule details are authored by external code analysis or users submitting code to SonarQube.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata