factory-config
Warn
Audited by Snyk on Aug 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). SKILL.md describes a factory.config.json for @agent-relay/factory but does not specify any runtime workflow that ingests outsider-authored free text without first selecting trusted provider items (it discusses mirroring GitHub issues to Linear and dispatching workflows, but the required runtime text ingestion is not shown as direct queue/feed/chat parsing).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata