scope-issue
Warn
Audited by Snyk on Aug 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The
scope-issuestateless workflow requires anissue_jsoninput that is produced by fetching GitHub issues/comments, thenscripts/seal_issue_plan.py→check_issue_plan.validate_plan()→ reads and parses that issue-authored text from the provided JSON artifact and validates anchors.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata