staircase-report
Warn
Audited by Snyk on Aug 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Runtime reads outsider-authored free text at report-generation time by ingesting Parsely DPL event fields like
url,sref_domain,metadata_canonical_url,metadata_section,metadata_authors, andextra_datafrom the DuckDB/parquet lake, which then get rendered into the markdown/HTML report (including callouts and linkable page/section/author labels).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata