arc-planning-work
Warn
Audited by Snyk on Jul 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). Outsider-authored free text from the planning source (e.g., GitHub issue body/comments or PRD pasted/linked by someone else) is fetched in step “Read the source item” and then used for planning, meaning it becomes LLM-readable context via the runtime path “fetch issue/story/PRD body and comments” (SKILL.md:17-20, 18-19; GitHub mode: GITHUB_MODE.md:7-9).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata